Alerts This Week
Warning Icon 1 619
Alerts This Week
Warning Icon 1 619

Debian 8: DSA-3716-1 High Risk: Firefox-ESR Execution Issue

debian
Calendar Grey November 16, 2016
Debian Logo
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - --------------------------------------------------
Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation errors may lead to the executi...

Summary

Multiple security issues have been found in the Mozilla Firefox web
browser: Multiple memory safety errors, buffer overflows and other
implementation errors may lead to the execution of arbitrary code or
bypass of the same-origin policy. Also, a man-in-the-middle attack in
the addon update mechanism has been fixed.

For the stable distribution (jessie), these problems have been fixed in
version 45.5.0esr-1~deb8u1.

For the unstable distribution (sid), these problems have been fixed in
version 45.5.0esr-1 and version 50.0-1 of the firefox source package.

We recommend that you upgrade your firefox-esr packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Package: firefox-esr
CVE ID: CVE-2016-5290 CVE-2016-5291 CVE-2016-5296 CVE-2016-5297

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here