tocsin

Debian/firefox-esr: medium 5.4

Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird

Action: Upgrade firefox-esr to 140.14.0esr-1~deb12u1 or later.

Affected

introducedfixedlast affected
0140.14.0esr-1~deb12u1-

Fixed versions

140.14.0esr-1~deb12u1

Sources

published · modified · JSON