[Secure-testing-team] Bug#770499: conkeror: WebM loading crashes conkeror

[Nils Dagsson Moskopp]

Package: conkeror
Version: 1.0~~pre-1+git141025-1
Severity: grave
Tags: upstream security
Justification: user security hole

Dear Maintainer,

a video crashed conkeror with the following message:
> out of memory: 0x00000000FFFFFFFF bytes requested
> Segmentation fault

See bug #770490 for similar bug report regarding iceweasel:
<https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770490>

-- Package-specific info:

-- Extensions information
Name: Element Hiding Helper for Adblock Plus
Location: /usr/share/mozilla/extensions/{a79fe89b-6662-4ff4-8e88-09950ad4dfde}/elemhidehelper at adblockplus.org
Package: xul-ext-adblock-plus-element-hiding-helper
Status: enabled

-- Plugins information

-- Addons package information
ii  xul-ext-adbloc 1.3-1        all          companion for Adblock Plus to cre

-- Extensions information
Name: Element Hiding Helper for Adblock Plus
Location: /usr/share/mozilla/extensions/{a79fe89b-6662-4ff4-8e88-09950ad4dfde}/elemhidehelper at adblockplus.org
Package: xul-ext-adblock-plus-element-hiding-helper
Status: enabled

-- Plugins information

-- Addons package information
ii  xul-ext-adbloc 1.3-1        all          companion for Adblock Plus to cre

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 3.13-1-686-pae (SMP w/1 CPU core)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages conkeror depends on:
ii  iceweasel       31.2.0esr-3
ii  xulrunner-17.0  17.0.10esr-1~deb7u1
ii  xulrunner-24.0  24.5.0esr-1

Versions of packages conkeror recommends:
ii  conkeror-spawn-process-helper  1.0~~pre-1+git140616-1
ii  xdg-utils                      1.1.0~rc1+git20111210-7.1

Versions of packages conkeror suggests:
ii  emacs23 [emacsen]  23.4+1-4.1+b1

-- no debconf information