tocsin

Debian/firefox-esr: medium 5.4

A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability was fixed in Firefox 139, Firefox ESR 128.11, Thunderb

Action: Upgrade firefox-esr to 128.11.0esr-1~deb12u1 or later.

Affected

introducedfixedlast affected
0128.11.0esr-1~deb12u1-

Fixed versions

128.11.0esr-1~deb12u1

Sources

published · modified · JSON