CVE-2023-6860 · cross-distro fix matrix

CVE-2023-6860: The `VideoBridge` allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.

Affects 8 Linux releases across 11 (distro × package) combinations.

Fix per ecosystem

Each block below is a distro release where CVE-2023-6860 has a known fix. Run the listed command on that distro to remediate.

Source: Debian Security Tracker

firefox-esr→ fixed in115.6.0esr-1~deb11u1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y firefox-esr
```
thunderbird→ fixed in1:115.6.0-1~deb11u1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y thunderbird
```

Source: Debian Security Tracker

firefox-esr→ fixed in115.6.0esr-1~deb12u1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y firefox-esr
```
thunderbird→ fixed in1:115.6.0-1~deb12u1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y thunderbird
```

Source: Debian Security Tracker

firefox-esr→ fixed in115.6.0esr-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y firefox-esr
```
thunderbird→ fixed in1:115.6.0-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y thunderbird
```