tocsin

Debian/firefox-esr: high 7.5

A race during concurrent delazification could have led to a use-after-free. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.

Action: Upgrade firefox-esr to 128.7.0esr-1 or later.

Affected

introducedfixedlast affected
0128.7.0esr-1-

Fixed versions

128.7.0esr-1

Sources

published · modified · JSON