[SECURITY] [DSA 3050-2] xulrunner update

2014-10-2817:28:03

lists.debian.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.051 Low

EPSS

Percentile

92.9%

JSON

Debian Security Advisory DSA-3050-2 [email protected]
http://www.debian.org/security/ Moritz Muehlenhoff
October 28, 2014 http://www.debian.org/security/faq

Package : iceweasel
CVE ID : CVE-2014-1574 CVE-2014-1576 CVE-2014-1577 CVE-2014-1578
CVE-2014-1581 CVE-2014-1583 CVE-2014-1585 CVE-2014-1586

DSA-3050-1 updated the Iceweasel browser to the new ESR31 series of
Firefox. In that version the xulrunner library is no longer included.
This followup update provides xulrunner 24.8.1esr-2~deb7u1 in a separate
source package to ensure that packages build-depending on xulrunner
remain buildable.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian7alliceweasel-l10n-th< 1:31.2.0esr-2~deb7u1iceweasel-l10n-th_1:31.2.0esr-2~deb7u1_all.deb
Debian7alliceweasel-l10n-sr< 1:31.2.0esr-2~deb7u1iceweasel-l10n-sr_1:31.2.0esr-2~deb7u1_all.deb
Debian7alliceweasel-l10n-af< 1:31.2.0esr-2~deb7u1iceweasel-l10n-af_1:31.2.0esr-2~deb7u1_all.deb
Debian7alliceweasel-l10n-km< 1:31.2.0esr-2~deb7u1iceweasel-l10n-km_1:31.2.0esr-2~deb7u1_all.deb
Debian7armhficeowl-extension< 31.2.0-1~deb7u1iceowl-extension_31.2.0-1~deb7u1_armhf.deb
Debian7alliceweasel-l10n-gl< 1:31.2.0esr-2~deb7u1iceweasel-l10n-gl_1:31.2.0esr-2~deb7u1_all.deb
Debian7powerpciceweasel-dbg< 31.2.0esr-2~deb7u1iceweasel-dbg_31.2.0esr-2~deb7u1_powerpc.deb
Debian7alliceweasel-l10n-es-mx< 1:31.2.0esr-2~deb7u1iceweasel-l10n-es-mx_1:31.2.0esr-2~deb7u1_all.deb
Debian7armhficedove-dbg< 31.2.0-1~deb7u1icedove-dbg_31.2.0-1~deb7u1_armhf.deb
Debian7i386icedove< 31.2.0-1~deb7u1icedove_31.2.0-1~deb7u1_i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	all	iceweasel-l10n-th	< 1:31.2.0esr-2~deb7u1	iceweasel-l10n-th_1:31.2.0esr-2~deb7u1_all.deb
Debian	7	all	iceweasel-l10n-sr	< 1:31.2.0esr-2~deb7u1	iceweasel-l10n-sr_1:31.2.0esr-2~deb7u1_all.deb
Debian	7	all	iceweasel-l10n-af	< 1:31.2.0esr-2~deb7u1	iceweasel-l10n-af_1:31.2.0esr-2~deb7u1_all.deb
Debian	7	all	iceweasel-l10n-km	< 1:31.2.0esr-2~deb7u1	iceweasel-l10n-km_1:31.2.0esr-2~deb7u1_all.deb
Debian	7	armhf	iceowl-extension	< 31.2.0-1~deb7u1	iceowl-extension_31.2.0-1~deb7u1_armhf.deb
Debian	7	all	iceweasel-l10n-gl	< 1:31.2.0esr-2~deb7u1	iceweasel-l10n-gl_1:31.2.0esr-2~deb7u1_all.deb
Debian	7	powerpc	iceweasel-dbg	< 31.2.0esr-2~deb7u1	iceweasel-dbg_31.2.0esr-2~deb7u1_powerpc.deb
Debian	7	all	iceweasel-l10n-es-mx	< 1:31.2.0esr-2~deb7u1	iceweasel-l10n-es-mx_1:31.2.0esr-2~deb7u1_all.deb
Debian	7	armhf	icedove-dbg	< 31.2.0-1~deb7u1	icedove-dbg_31.2.0-1~deb7u1_armhf.deb
Debian	7	i386	icedove	< 31.2.0-1~deb7u1	icedove_31.2.0-1~deb7u1_i386.deb