tocsin

Debian/firefox-esr: medium 4.3

Mozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderbird < 45.4 allow remote attackers to obtain sensitive information about the previously retrieved page via Resource Timing API calls.

Action: Upgrade firefox-esr to 45.4.0esr-1 or later.

Affected

introducedfixedlast affected
045.4.0esr-1-

Fixed versions

45.4.0esr-1

Sources

published · modified · JSON