Debian DSA-3050-1 : iceweasel - security update
High Nessus Plugin ID 78563
SynopsisThe remote Debian host is missing a security-related update.
DescriptionMultiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code, denial of service, the bypass of the same-origin policy or a loss of privacy.
This update updates Iceweasel to the ESR31 series of Firefox. The new release introduces a new user interface.
In addition, this update also disables SSLv3.
SolutionUpgrade the iceweasel packages.
For the stable distribution (wheezy), these problems have been fixed in version 31.2.0esr-2~deb7u1.