-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3211-1 security@debian.org http://www.debian.org/security/ Salvatore Bonaccorso April 01, 2015 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : iceweasel CVE ID : CVE-2015-0801 CVE-2015-0807 CVE-2015-0813 CVE-2015-0815 CVE-2015-0816 Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, use-after-frees and other implementation errors may lead to the execution of arbitrary code, the bypass of security restrictions, denial of service or cross-site request forgery. For the stable distribution (wheezy), these problems have been fixed in version 31.6.0esr-1~deb7u1. For the unstable distribution (sid), these problems have been fixed in version 31.6.0esr-1. We recommend that you upgrade your iceweasel packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJVHBhCAAoJEAVMuPMTQ89ETb4P/RV0Vs+NrOBotabv0dO1QCGE 6u+/4x9ERinOfjw9WblbGEcOvhbdtFV1zP2eaYxtXLAI4dapzoSaD6c3P+cTfEpf 025Kmezg6+RrKUQu9ptM7yjSY03bNPCCvL4OJ1WMDsYcR3bVOytnaJ6xQR1R4pH+ lnYJThEiZKTap//GFGj39hatIwutesbVRid7zv8jAgznO7loVz2p2gZ6SO1FnTS4 mxJ5xGXi6RjAuxTG25Au3uaCAln28p3txwK88obsRBGAYVM9NIAHu+N1nY0HZU4q 7DdGnV9xf8KCrt7oYBcbUFTJrsQp6dxYXtzczMSpiRfQ7t9KnsKMbU8rx7IS18Q9 RmE0EvPyHWzx5Dsu8OzcMxy7T7NMDurSGenBLi7uGWRcJGkOTj1u41PT09TwX7kX 3jwBcySORFSedaLsVqPt6iAKfdiNrhkzYwqqWsUrEpNr52F+p+NZvuZ6mlWgl3o8 2HD6pAdnlrkdIVJ5uJMw9ITx9VRUEoOu0lxe9BYVyLFS0gVMRszFpLAS5vI0XCy6 1qIv1ziI3u+MGplM1Xlc7yj5SEjnBrZSr4MAEKeyaHWMq41RPMKku02YjzBqsDJv ffyy/Op32IlV8UxQTZTvqYPpJG51mzFONhEVPE3yOG9x0022D+D8uF067u6akHFK 935EORvm8+fMEMqXEYa1 =X0IP -----END PGP SIGNATURE-----