UBUNTU-CVE-2026-124856: Medium severity ubuntu/mozjs52 vulnerability
Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 160 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 153.7 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 160 - Upgrade
Upgrade
Thunderbird ESRto a version that resolves this vulnerability.Fixed in 153.7
Event History
Frequently Asked Questions
Which Ubuntu packages should be reviewed for exposure?
The affected software list includes ubuntu/mozjs38, ubuntu/mozjs52, ubuntu/mozjs68, ubuntu/mozjs78, ubuntu/mozjs91, ubuntu/mozjs102, ubuntu/mozjs115, and ubuntu/thunderbird. Verify the installed package versions against Ubuntu's security update information.