tocsin

Debian/firefox-esr: critical 9.8

A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 5

Action: Upgrade firefox-esr to 52.2.0esr-1 or later.

Affected

introducedfixedlast affected
052.2.0esr-1-

Fixed versions

52.2.0esr-1

Sources

published · modified · JSON