• [SECURITY] [DSA 3300-1] iceweasel security update

    From Moritz Muehlenhoff@1:229/2 to All on Sat Jul 4 00:10:02 2015
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-3300-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff
    July 04, 2015 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : iceweasel
    CVE ID : CVE-2015-2743 CVE-2015-4000 CVE-2015-2734 CVE-2015-2735
    CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739
    CVE-2015-2740 CVE-2015-2728 CVE-2015-2731 CVE-2015-2724

    Multiple security issues have been found in Iceweasel, Debian's version
    of the Mozilla Firefox web browser: Multiple memory safety errors, use-after-frees and other implementation errors may lead to the
    execution of arbitrary code or denial of service. This update also
    addresses a vulnerability in DHE key processing commonly known as
    the "LogJam" vulnerability.

    For the oldstable distribution (wheezy), this problem has been fixed
    in version 31.8.0esr-1~deb7u1.

    For the stable distribution (jessie), this problem has been fixed in
    version 31.8.0esr-1~deb8u1.

    For the unstable distribution (sid), this problem has been fixed in
    version 38.1.0esr-1.

    We recommend that you upgrade your iceweasel packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1

    iQIcBAEBAgAGBQJVlwcNAAoJEBDCk7bDfE423YUP/jMCjFkgYL0Ky89PzBZ48FLz C2hL8LuRYamhXO3ZbvcktEABX9hJxoRUfrcDRjjoSEGgThhmOEzqC/R1TTz/8ExW 2lX326be5sNc4VEfNs5B2Sm2e/jYmwgghvYQUFlRnS/dSUpXuiqdgRc3+eteeCBU CRmYreptEAvMf2QaXJJIb8g+jGd1NQiklkCXpUIWdQP4jm5K6xyM9+pxhFhMAVkM 0vw6fy566WJqMhjFyTQeXYR+fE32GVJ3wZmR5OSWrBQh5Rt1FrJ2mSA17HsGTCRG T3CgfTRVbPHg5w7C7k83GlQeXZbJUgHZp47t3+YZr17N6BeeSHHWTwap9eM/rHd4 qn0jDMhgWAjCK0Z975Z+1ZblP2hvyr/PJF1Zwm6dJbjWP3mMsfdrYBnoeXupI9Y7 xA+LbXjKUW//6fGkuEAbOHJO45XrTE+OrbZ5+jAS3BIpyk+JuWh7M6q/UggMe+v7 ZUZanLxM3aaw6dVca9TLhFzOs3cpe8vCqavPpQWm0S1dszkH23IkoaKT8zWRqwIt rxFhFoymGbtsJn6W481DO3cY/ujaJUVWWXteB4LYU8QboQ9BdVXFSqedF87jIsRy aqnhltYQZ23SsQX3elsbQY6OOmYMUXWyb4xRkAZ2xTtCDlHI8Fe5pQftldg3LNyP Cnr+4/67BJCGy4qYH9VU
    =7/pR
    -----END PGP SIGNATURE-----


    --
    To UNSUBSCRIBE, email to [email protected]
    with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: https://lists.debian.org/[email protected]

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)