The following updates has been released for Debian Linux:

[DSA 3734-1] firefox-esr security update
[DSA 3735-1] game-music-emu security update

[DSA 3734-1] firefox-esr security update

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3734-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
December 14, 2016 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : firefox-esr
CVE ID : CVE-2016-9893 CVE-2016-9895 CVE-2016-9897 CVE-2016-9898
CVE-2016-9899 CVE-2016-9900 CVE-2016-9901 CVE-2016-9902
CVE-2016-9904 CVE-2016-9905

Multiple security issues have been found in the Mozilla Firefox web
browser: Multiple memory safety errors, buffer overflows and other
implementation errors may lead to the execution of arbitrary code or
information leaks.

For the stable distribution (jessie), these problems have been fixed in
version 45.6.0esr-1~deb8u1.

For the unstable distribution (sid), these problems have been fixed in
version 45.6.0esr-1 of firefox-esr and version 50.1.0-1 of firefox.

We recommend that you upgrade your firefox-esr packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

[DSA 3735-1] game-music-emu security update

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3735-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
December 15, 2016 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : game-music-emu
CVE ID : not yet available

Chris Evans discovered that incorrect emulation of the SPC700 audio
co-processor of the Super Nintendo Entertainment System allows the
execution of arbitrary code if a malformed SPC music file is opened.
Further information can be found at
http://scarybeastsecurity.blogspot.de/2016/12/redux-compromising-linux-using-snes.html

For the stable distribution (jessie), this problem has been fixed in
version 0.5.5-2+deb8u1.

For the unstable distribution (sid), this problem has been fixed in
version 0.6.0-4.

We recommend that you upgrade your game-music-emu packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/