tocsin

Debian/firefox-esr: critical 9.8

Use-after-free in MediaTrackGraphImpl::GetInstance(). This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.

Action: Upgrade firefox-esr to 140.4.0esr-1~deb12u1 or later.

Affected

introducedfixedlast affected
0140.4.0esr-1~deb12u1-

Fixed versions

140.4.0esr-1~deb12u1

Sources

published · modified · JSON