Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefo...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153.3, Thunderbird 156, Thunderbird 153.3, Firefox ESR 115.42, and Firefox ESR 140.17.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 thunderbird

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.17.0esr-1~deb12u1"}]}]

Debian:13 thunderbird

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.17.0esr-1~deb13u1"}]}]

Debian:14 thunderbird

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:153.3.0esr-1"}]}]

参照URL

advisory security-tracker.debian.org