1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • [SECURITY] [DSA 3365-1] iceweasel security update

    From Moritz Muehlenhoff@1:229/2 to All on Wed Sep 23 19:00:02 2015
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-3365-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 23, 2015 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : iceweasel
    CVE ID : CVE-2015-4500 CVE-2015-4506 CVE-2015-4509 CVE-2015-4511
    CVE-2015-4517 CVE-2015-4519 CVE-2015-4520 CVE-2015-4521
    CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176
    CVE-2015-7177 CVE-2015-7180

    Multiple security issues have been found in Iceweasel, Debian's version
    of the Mozilla Firefox web browser: Multiple memory safety errors,
    integer overflows, buffer overflows, use-after-frees and other
    implementation errors may lead to the execution of arbitrary code,
    information disclosure or denial of service.

    For the oldstable distribution (wheezy), these problems have been fixed
    in version 38.3.0esr-1~deb7u1.

    For the stable distribution (jessie), these problems have been fixed in
    version 38.3.0esr-1~deb8u1.

    For the unstable distribution (sid), these problems have been fixed in
    version 38.3.0esr-1.

    We recommend that you upgrade your iceweasel packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1

    iQIcBAEBAgAGBQJWAtexAAoJEBDCk7bDfE420WkP+wQLIly4wTsLbs+dAH4Fl4QC c8mbh77JoOE6ixc33tHNSd33ez/niEGgj+dKO4Ufjr2paV1lARW9uIrNctrLhTj8 unQ8snV8JorUAtFhx59fbuVBK9ud/eKdYfij1GdFX1d7emHnMwNS8lNydEiSwSDZ YgqtwjezenqTeBqCck+5nJITYdnKnjh8oYTWbaIG4pBsnb+SiQ61Ty+HSWHq/Thn fY8sC05V6uGKLGdSrtiPRwjtFwwtU+wvTYkIyvubALndtWXp242/S6VA0YUfHuRV NjJdtOJoT4oTGmEjHiWIuGzUzr9AvOabISuSOWe/AqPNbM/OaUAMbwJ1mYkqpl/f OCbfyebApTBgTS8VQoaYDdlcNfTV9R5CT6W7mkSChtDxi/v0b7/WxCiiOcz48W6t mMI/ITS8Lqquazi5OBN1IUf6KuDThMZ14Qr8amLrxzYE5DGGuNiNob49atiODKRY H/Fi5NwiBwobh8kbEJ/C36Vd7vXT/nVsEMbNolf2oJp3YY5f/ry5y0BljWsdMlhY KaU06pg5weGglUQ9AjFsC/H7SkDYiCVGRFTtklXnRi6ViqYYNAjiA7ok1GuORiQp WpUqCjbfEB4rsa4LHriKjSIF0Z8J0MiOjeRWyDczAMvPPC7EnOpHxtx6RZWUsbaM b1uu6t0exV1M3IB4JhJw
    =5p7h
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)