firefox-esr - security update

Fixed packages 1

Vulnerabilities 12

• Unscored —
  CVE-2016-5250

  Mozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderbird < 45.4 allow remote attackers to obtain sensitive infor…

  thunderbird firefox firefox-esr Debian Ubuntu
  Aug 5, 2016
• Unscored —
  CVE-2016-5257

  Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5261

  Integer overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox before 48.0 and Firefox E…

  firefox firefox-esr Debian Ubuntu
  Aug 5, 2016
• Unscored —
  CVE-2016-5270

  Heap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in Mozilla Firefox before 49.…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5272

  The nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 doe…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5274

  Use-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox before 49.0, Firefox …

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5276

  Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox b…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5277

  Use-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0, Firefox ESR 45.x bef…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5278

  Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5280

  Use-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap function in Mozilla Fire…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5281

  Use-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, an…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5284

  Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates f…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016