[SECURITY] [DSA 3987-1] firefox-esr security update

- ------------------------------------------------------------------------- Debian Security Advisory DSA-3987-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff September 29, 2017 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : firefox-esr CVE ID : CVE-2017-7793 CVE-2017-7805 CVE-2017-7810 CVE-2017-7814 CVE-2017-7818 CVE-2017-7819 CVE-2017-7823 CVE-2017-7824 Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, use-after-frees, buffer overflows and other implementation errors may lead to the execution of arbitrary code, denial of service, cross-site scripting or bypass of the phishing and malware protection feature. For the oldstable distribution (jessie), these problems have been fixed in version 52.4.0esr-1~deb8u1. For the stable distribution (stretch), these problems have been fixed in version 52.4.0esr-1~deb9u1. We recommend that you upgrade your firefox-esr packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/