Debian/firefox-esr: high 8.1
A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when
Action: Upgrade firefox-esr to 60.2.2esr-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 60.2.2esr-1 | - |
Fixed versions
| 60.2.2esr-1 |
Sources
- osv: DEBIAN-CVE-2018-12386#Debian:13/firefox-esr
- https://security-tracker.debian.org/tracker/CVE-2018-12386
published · modified · JSON