Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-100777 →
DEBIAN-CVE-2026-100777
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbir...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
firefox-esr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.4.0esr-1~deb12u1"}]}]
Debian:13
firefox-esr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.4.0esr-1~deb13u1"}]}]
Debian:14
firefox-esr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.4.0esr-1"}]}]
Debian:12
thunderbird
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.17.0esr-1~deb12u1"}]}]
Debian:13
thunderbird
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.17.0esr-1~deb13u1"}]}]
Debian:14
thunderbird
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:153.4.0esr-1"}]}]
Références
- advisory security-tracker.debian.org