Debian Security Advisory 1558-1 – It was discovered that crashes in the Javascript engine of xulrunner, the Gecko engine library, could potentially lead to the execution of arbitrary code.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/65748/dsa-1558-1.txt
Source: https://packetstormsecurity.com/files/65748/Debian-Linux-Security-Advisory-1558-1.html