bugtraq - [SECURITY] [DSA 3365-1] iceweasel security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20150923164903.GA16539@pisco.westfalen.local>
Date: Wed, 23 Sep 2015 18:49:03 +0200
From: Moritz Muehlenhoff <jmm@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 3365-1] iceweasel security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3365-1                   security@...ian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
September 23, 2015                    https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : iceweasel
CVE ID         : CVE-2015-4500 CVE-2015-4506 CVE-2015-4509 CVE-2015-4511 
                 CVE-2015-4517 CVE-2015-4519 CVE-2015-4520 CVE-2015-4521
                 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176
                 CVE-2015-7177 CVE-2015-7180

Multiple security issues have been found in Iceweasel, Debian's version
of the Mozilla Firefox web browser:  Multiple memory safety errors,
integer overflows, buffer overflows, use-after-frees and other
implementation errors may lead to the execution of arbitrary code,
information disclosure or denial of service.

For the oldstable distribution (wheezy), these problems have been fixed
in version 38.3.0esr-1~deb7u1.

For the stable distribution (jessie), these problems have been fixed in
version 38.3.0esr-1~deb8u1.

For the unstable distribution (sid), these problems have been fixed in
version 38.3.0esr-1.

We recommend that you upgrade your iceweasel packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=5p7h
-----END PGP SIGNATURE-----