[IT-SecNots] [SECURITY] [DSA 3734-1] firefox-esr security update

[Moritz Muehlenhoff <jmm AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3734-1                   security AT debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
December 14, 2016                     https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : firefox-esr
CVE ID         : CVE-2016-9893 CVE-2016-9895 CVE-2016-9897 CVE-2016-9898 
                 CVE-2016-9899 CVE-2016-9900 CVE-2016-9901 CVE-2016-9902
                 CVE-2016-9904 CVE-2016-9905

Multiple security issues have been found in the Mozilla Firefox web
browser: Multiple memory safety errors, buffer overflows and other
implementation errors may lead to the execution of arbitrary code or
information leaks.

For the stable distribution (jessie), these problems have been fixed in
version 45.6.0esr-1~deb8u1.

For the unstable distribution (sid), these problems have been fixed in
version 45.6.0esr-1 of firefox-esr and version 50.1.0-1 of firefox.

We recommend that you upgrade your firefox-esr packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=j301
-----END PGP SIGNATURE-----