Debian DSA-3881-1 : firefox-esr - security update
High Nessus Plugin ID 100797
SynopsisThe remote Debian host is missing a security-related update.
DescriptionSeveral security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, use-after-frees, buffer overflows and other implementation errors may lead to the execution of arbitrary code, denial of service or domain spoofing.
Debian follows the extended support releases (ESR) of Firefox. Support for the 45.x series has ended, so starting with this update we're now following the 52.x releases.
SolutionUpgrade the firefox-esr packages.
For the stable distribution (jessie), these problems have been fixed in version 52.2.0esr-1~deb8u1.
For the upcoming stable distribution (stretch), these problems will be fixed soon.