tocsin

Debian/firefox-esr: critical 9.8

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This

Action: Upgrade firefox-esr to 128.3.1esr-1~deb12u1 or later.

Affected

introducedfixedlast affected
0128.3.1esr-1~deb12u1-

Fixed versions

128.3.1esr-1~deb12u1

Sources

published · modified · JSON