—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

– ————————————————————————-
Debian Security Advisory DSA-3050-1 security@debian.org
http://www.debian.org/security/ Moritz Muehlenhoff
October 15, 2014 http://www.debian.org/security/faq
– ————————————————————————-

Package : iceweasel
CVE ID : CVE-2014-1574 CVE-2014-1576 CVE-2014-1577 CVE-2014-1578
CVE-2014-1581 CVE-2014-1583 CVE-2014-1585 CVE-2014-1586

Multiple security issues have been found in Iceweasel, Debian’s version
of the Mozilla Firefox web browser: Multiple memory safety errors, buffer
overflows, use-after-frees and other implementation errors may lead to
the execution of arbitrary code, denial of service, the bypass of the
same-origin policy or a loss of privacy.

This update updates Iceweasel to the ESR31 series of Firefox. The new
release introduces a new user interface.

In addition, this update also disables SSLv3.

For the stable distribution (wheezy), these problems have been fixed in
version 31.2.0esr-2~deb7u1.

For the unstable distribution (sid), these problems have been fixed in
version 31.2.0esr-1.

For the experimental distribution, these problems have been fixed in
version 33.0-1.

We recommend that you upgrade your iceweasel packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1
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=sT3i
—–END PGP SIGNATURE—–

—
To UNSUBSCRIBE, email to debian-security-announce-REQUEST@lists.debian.org
with a subject of “unsubscribe”. Trouble? Contact listmaster@lists.debian.org
Archive: https://lists.debian.org/20141018173154.GA2347@pisco.westfalen.local