Alpine/firefox-esr: high 8.8

When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly cast to the wrong type. This resulted in a heap user-after-free, memory corruption, and a potent

Action: Upgrade firefox-esr to 78.6.0-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2020-26974#Alpine:v3.19/firefox-esr
• https://security.alpinelinux.org/vuln/CVE-2020-26974

published 2021-01-07T14:15:12Z · modified 2026-11-03T06:32:45.960354865Z · JSON