tocsin

Debian/firefox-esr: high 7.1

Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.

Action: Upgrade firefox-esr to 140.3.0esr-1~deb12u1 or later.

Affected

introducedfixedlast affected
0140.3.0esr-1~deb12u1-

Fixed versions

140.3.0esr-1~deb12u1

Sources

published · modified · JSON