Debian-LTS alert DLA-585-1 (firefox-esr)

From:
    	     
 
Markus Koschany <apo@debian.org> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 585-1] firefox-esr security update 
Date:
    	     
 
Thu, 4 Aug 2016 10:55:22 +0200
Message-ID:
    	     
 
<2d9293ee-948f-d3b6-e876-9bf75fbe0206@debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Package        : firefox-esr
Version        : 45.3.0esr-1~deb7u1
CVE ID         : CVE-2016-2830 CVE-2016-2836 CVE-2016-2837
                 CVE-2016-2838 CVE-2016-5252 CVE-2016-5254
                 CVE-2016-5258 CVE-2016-5259 CVE-2016-5262
                 CVE-2016-5263 CVE-2016-5264 CVE-2016-5265



Multiple security issues have been found in the Mozilla Firefox web
browser: Multiple memory safety errors, buffer overflows and other
implementation errors may lead to the execution of arbitrary code,
cross-site scriping, information disclosure and bypass of the
same-origin policy.


For Debian 7 "Wheezy", these problems have been fixed in version
45.3.0esr-1~deb7u1.

We recommend that you upgrade your firefox-esr packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=DFTn
-----END PGP SIGNATURE-----