Debian/firefox-esr: medium 5.4

The content security policy (CSP) "sandbox" directive did not create a unique origin for the document, causing it to behave as if the "allow-same-origin" keyword were always specified. This could allo

Action: Upgrade firefox-esr to 52.4.0esr-2 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2017-7823
• https://security-tracker.debian.org/tracker/CVE-2017-7823

published 2018-06-11T21:29:11Z · modified 2026-09-01T20:03:50.751507481Z · JSON