This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2019-17026 →
DEBIAN-CVE-2019-17026
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in t...
Original description
The description as published by the source.
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 68.4.1, Thunderbird < 68.4.1, and Firefox < 72.0.1.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
firefox-esr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.4.1esr-1"}]}]
Debian:13
firefox-esr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.4.1esr-1"}]}]
Debian:14
firefox-esr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.4.1esr-1"}]}]
Debian:12
thunderbird
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:68.4.1-1"}]}]
Debian:13
thunderbird
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:68.4.1-1"}]}]
Debian:14
thunderbird
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:68.4.1-1"}]}]
References
- advisory security-tracker.debian.org