Debian Security Advisory 1558-1 - It was discovered that crashes in the Javascript engine of xulrunner, the Gecko engine library, could potentially lead to the execution of arbitrary code.
54cd69b61e3be148c0982afc1ffa91bcd8480dcbf5b5e98263078fe15b23f17a