bugtraq - [SECURITY] [DSA 3523-1] iceweasel security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Sun, 20 Mar 2016 23:03:46 +0100
From: Moritz Muehlenhoff <jmm@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 3523-1] iceweasel security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3523-1                   security@...ian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
March 20, 2016                        https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : iceweasel
CVE ID         : not available

This update disables the Graphite font shaping library in Iceweasel,
Debian's version of the Mozilla Firefox web browser.

For the oldstable distribution (wheezy), this problem has been fixed
in version 38.7.1esr-1~deb7u1.

For the stable distribution (jessie), this problem has been fixed in
version 38.7.1esr-1~deb8u1.

For the unstable distribution (sid), this problem has been fixed in
version 45.0.1esr-1 of the firefox-esr source package.

We recommend that you upgrade your iceweasel packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=3KFZ
-----END PGP SIGNATURE-----