Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 533
Alerts This Week
Warning Icon 1 533

Debian DSA-2553-1: Critical Iceweasel Remote Threat Advisory

debian
Calendar Grey September 24, 2012
Debian Logo
Ubuntu Security Notice USN-5124-1 highlights multiple vulnerabilities in Mozilla Firefox, recommending an immediate upgrade to all users.
Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox
Topics%20covered

Topics Covered

security advisory security issue software update Debian remote threat Iceweasel

Summary

Several vulnerabilities have been discovered in Iceweasel, a web
browser based on Firefox. The included XULRunner library provides
rendering services for several other applications included in Debian.

The reported vulnerabilities could lead to the execution of arbitrary
code or the bypass of content-loading restrictions via the location
object.

For the stable distribution (squeeze), these problems have been fixed in
version 3.5.16-18.

For the testing distribution (wheezy), these problems have been fixed in
version 10.0.7esr-2.

For the unstable distribution (sid), these problems have been fixed in
version 10.0.7esr-2.

We recommend that you upgrade your iceweasel packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: iceweasel
CVE ID: CVE-2012-1970 CVE-2012-1972 CVE-2012-1973 CVE-2012-1974

Topics%20covered

Topics Covered

security advisory security issue software update Debian remote threat Iceweasel

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.