[SECURITY] [DSA 2986-1] iceweasel security update

2014-07-2319:50:45

lists.debian.org

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.041 Low

EPSS

Percentile

92.0%

JSON

Debian Security Advisory DSA-2986-1 [email protected]
http://www.debian.org/security/ Moritz Muehlenhoff
July 23, 2014 http://www.debian.org/security/faq

Package : iceweasel
CVE ID : CVE-2014-1544 CVE-2014-1547 CVE-2014-1555 CVE-2014-1556
CVE-2014-1557

Multiple security issues have been found in Iceweasel, Debian's version
of the Mozilla Firefox web browser: Multiple memory safety errors and
use-after-frees may lead to the execution of arbitrary code or denial
of service.

For the stable distribution (wheezy), these problems have been fixed in
version 24.7.0esr-1~deb7u1.

For the unstable distribution (sid), these problems have been fixed in
version 31.0-1.

We recommend that you upgrade your iceweasel packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian7i386icedove< 24.7.0-1~deb7u1icedove_24.7.0-1~deb7u1_i386.deb
Debian7kfreebsd-amd64libmozjs-dev< 24.7.0esr-1~deb7u1libmozjs-dev_24.7.0esr-1~deb7u1_kfreebsd-amd64.deb
Debian7armhficeweasel< 24.7.0esr-1~deb7u1iceweasel_24.7.0esr-1~deb7u1_armhf.deb
Debian7alliceweasel-l10n-en-gb< 1:24.7.0esr-1~deb7u1iceweasel-l10n-en-gb_1:24.7.0esr-1~deb7u1_all.deb
Debian7alliceweasel-l10n-ku< 1:24.7.0esr-1~deb7u1iceweasel-l10n-ku_1:24.7.0esr-1~deb7u1_all.deb
Debian7alliceweasel-l10n-tr< 1:24.7.0esr-1~deb7u1iceweasel-l10n-tr_1:24.7.0esr-1~deb7u1_all.deb
Debian7kfreebsd-i386xulrunner-24.0< 24.7.0esr-1~deb7u1xulrunner-24.0_24.7.0esr-1~deb7u1_kfreebsd-i386.deb
Debian7amd64iceweasel-dbg< 24.7.0esr-1~deb7u1iceweasel-dbg_24.7.0esr-1~deb7u1_amd64.deb
Debian7armhflibmozjs-dev< 24.7.0esr-1~deb7u1libmozjs-dev_24.7.0esr-1~deb7u1_armhf.deb
Debian7alliceweasel-l10n-lv< 1:24.7.0esr-1~deb7u1iceweasel-l10n-lv_1:24.7.0esr-1~deb7u1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	i386	icedove	< 24.7.0-1~deb7u1	icedove_24.7.0-1~deb7u1_i386.deb
Debian	7	kfreebsd-amd64	libmozjs-dev	< 24.7.0esr-1~deb7u1	libmozjs-dev_24.7.0esr-1~deb7u1_kfreebsd-amd64.deb
Debian	7	armhf	iceweasel	< 24.7.0esr-1~deb7u1	iceweasel_24.7.0esr-1~deb7u1_armhf.deb
Debian	7	all	iceweasel-l10n-en-gb	< 1:24.7.0esr-1~deb7u1	iceweasel-l10n-en-gb_1:24.7.0esr-1~deb7u1_all.deb
Debian	7	all	iceweasel-l10n-ku	< 1:24.7.0esr-1~deb7u1	iceweasel-l10n-ku_1:24.7.0esr-1~deb7u1_all.deb
Debian	7	all	iceweasel-l10n-tr	< 1:24.7.0esr-1~deb7u1	iceweasel-l10n-tr_1:24.7.0esr-1~deb7u1_all.deb
Debian	7	kfreebsd-i386	xulrunner-24.0	< 24.7.0esr-1~deb7u1	xulrunner-24.0_24.7.0esr-1~deb7u1_kfreebsd-i386.deb
Debian	7	amd64	iceweasel-dbg	< 24.7.0esr-1~deb7u1	iceweasel-dbg_24.7.0esr-1~deb7u1_amd64.deb
Debian	7	armhf	libmozjs-dev	< 24.7.0esr-1~deb7u1	libmozjs-dev_24.7.0esr-1~deb7u1_armhf.deb
Debian	7	all	iceweasel-l10n-lv	< 1:24.7.0esr-1~deb7u1	iceweasel-l10n-lv_1:24.7.0esr-1~deb7u1_all.deb