[SECURITY] [DSA 3422-1] iceweasel security update

2015-12-1618:27:59

lists.debian.org

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.057 Low

EPSS

Percentile

93.4%

JSON

Debian Security Advisory DSA-3422-1 [email protected]
https://www.debian.org/security/ Moritz Muehlenhoff
December 16, 2015 https://www.debian.org/security/faq

Package : iceweasel
CVE ID : CVE-2015-7201 CVE-2015-7205 CVE-2015-7210 CVE-2015-7212
CVE-2015-7213 CVE-2015-7214 CVE-2015-7222

Multiple security issues have been found in Iceweasel, Debian's version
of the Mozilla Firefox web browser: Multiple memory safety errors,
integer overflows, use-after-frees and other implementation errors
may lead to the execution of arbitrary code, bypass of the same-origin
policy or denial of service.

For the oldstable distribution (wheezy), these problems have been fixed
in version 38.5.0esr-1~deb7u2.

For the stable distribution (jessie), these problems have been fixed in
version 38.5.0esr-1~deb8u2.

For the unstable distribution (sid), these problems have been fixed in
version 38.5.0esr-1.

We recommend that you upgrade your iceweasel packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian7alliceweasel-l10n-ast< 1:38.5.0esr-1~deb7u2iceweasel-l10n-ast_1:38.5.0esr-1~deb7u2_all.deb
Debian7mipselicedove< 38.5.0-1~deb7u1icedove_38.5.0-1~deb7u1_mipsel.deb
Debian7armeliceowl-extension< 38.5.0-1~deb7u1iceowl-extension_38.5.0-1~deb7u1_armel.deb
Debian7alliceweasel-l10n-vi< 1:38.5.0esr-1~deb7u2iceweasel-l10n-vi_1:38.5.0esr-1~deb7u2_all.deb
Debian7i386icedove-dev< 38.5.0-1~deb7u1icedove-dev_38.5.0-1~deb7u1_i386.deb
Debian8alliceweasel-l10n-gd< 1:38.5.0esr-1~deb8u2iceweasel-l10n-gd_1:38.5.0esr-1~deb8u2_all.deb
Debian8alliceweasel-l10n-an< 1:38.5.0esr-1~deb8u2iceweasel-l10n-an_1:38.5.0esr-1~deb8u2_all.deb
Debian7mipselicedove-dbg< 38.5.0-1~deb7u1icedove-dbg_38.5.0-1~deb7u1_mipsel.deb
Debian8ppc64eliceweasel< 38.5.0esr-1~deb8u2iceweasel_38.5.0esr-1~deb8u2_ppc64el.deb
Debian7alliceweasel-l10n-kk< 1:38.5.0esr-1~deb7u2iceweasel-l10n-kk_1:38.5.0esr-1~deb7u2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	all	iceweasel-l10n-ast	< 1:38.5.0esr-1~deb7u2	iceweasel-l10n-ast_1:38.5.0esr-1~deb7u2_all.deb
Debian	7	mipsel	icedove	< 38.5.0-1~deb7u1	icedove_38.5.0-1~deb7u1_mipsel.deb
Debian	7	armel	iceowl-extension	< 38.5.0-1~deb7u1	iceowl-extension_38.5.0-1~deb7u1_armel.deb
Debian	7	all	iceweasel-l10n-vi	< 1:38.5.0esr-1~deb7u2	iceweasel-l10n-vi_1:38.5.0esr-1~deb7u2_all.deb
Debian	7	i386	icedove-dev	< 38.5.0-1~deb7u1	icedove-dev_38.5.0-1~deb7u1_i386.deb
Debian	8	all	iceweasel-l10n-gd	< 1:38.5.0esr-1~deb8u2	iceweasel-l10n-gd_1:38.5.0esr-1~deb8u2_all.deb
Debian	8	all	iceweasel-l10n-an	< 1:38.5.0esr-1~deb8u2	iceweasel-l10n-an_1:38.5.0esr-1~deb8u2_all.deb
Debian	7	mipsel	icedove-dbg	< 38.5.0-1~deb7u1	icedove-dbg_38.5.0-1~deb7u1_mipsel.deb
Debian	8	ppc64el	iceweasel	< 38.5.0esr-1~deb8u2	iceweasel_38.5.0esr-1~deb8u2_ppc64el.deb
Debian	7	all	iceweasel-l10n-kk	< 1:38.5.0esr-1~deb7u2	iceweasel-l10n-kk_1:38.5.0esr-1~deb7u2_all.deb