Mailing List Archive

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 202208-08
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
https://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: High
Title: Mozilla Firefox: Multiple Vulnerabilities
Date: August 10, 2022
Bugs: #834631, #834804, #836866, #842438, #846593, #849044, #857045, #861515
ID: 202208-08

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

Multiple vulnerabilities have been found in Mozilla Firefox, the worst
of which could result in the arbitrary execution of code.

Background
==========

Mozilla Firefox is a popular open-source web browser from the Mozilla
project.

Affected packages
=================

-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 www-client/firefox < 91.12.0:esr >= 91.12.0:esr
< 103.0:rapid >= 103.0:rapid
2 www-client/firefox-bin < 91.12.0:esr >= 91.12.0:esr
< 103.0:rapid >= 103.0:rapid

Description
===========

Multiple vulnerabilities have been discovered in Mozilla Firefox. Please
review the CVE identifiers referenced below for details.

Impact
======

Please review the referenced CVE identifiers for details.

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All Mozilla Firefox ESR users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/firefox-91.12.0:esr"

All Mozilla Firefox ESR binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/firefox-bin-91.12.0:esr"

All Mozilla Firefox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/firefox-103.0:rapid"

All Mozilla Firefox binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/firefox-bin-103.0:rapid"

References
==========

[ 1 ] CVE-2022-0843
https://nvd.nist.gov/vuln/detail/CVE-2022-0843
[ 2 ] CVE-2022-1196
https://nvd.nist.gov/vuln/detail/CVE-2022-1196
[ 3 ] CVE-2022-1529
https://nvd.nist.gov/vuln/detail/CVE-2022-1529
[ 4 ] CVE-2022-1802
https://nvd.nist.gov/vuln/detail/CVE-2022-1802
[ 5 ] CVE-2022-1919
https://nvd.nist.gov/vuln/detail/CVE-2022-1919
[ 6 ] CVE-2022-2200
https://nvd.nist.gov/vuln/detail/CVE-2022-2200
[ 7 ] CVE-2022-2505
https://nvd.nist.gov/vuln/detail/CVE-2022-2505
[ 8 ] CVE-2022-24713
https://nvd.nist.gov/vuln/detail/CVE-2022-24713
[ 9 ] CVE-2022-26381
https://nvd.nist.gov/vuln/detail/CVE-2022-26381
[ 10 ] CVE-2022-26382
https://nvd.nist.gov/vuln/detail/CVE-2022-26382
[ 11 ] CVE-2022-26383
https://nvd.nist.gov/vuln/detail/CVE-2022-26383
[ 12 ] CVE-2022-26384
https://nvd.nist.gov/vuln/detail/CVE-2022-26384
[ 13 ] CVE-2022-26385
https://nvd.nist.gov/vuln/detail/CVE-2022-26385
[ 14 ] CVE-2022-26386
https://nvd.nist.gov/vuln/detail/CVE-2022-26386
[ 15 ] CVE-2022-26387
https://nvd.nist.gov/vuln/detail/CVE-2022-26387
[ 16 ] CVE-2022-26485
https://nvd.nist.gov/vuln/detail/CVE-2022-26485
[ 17 ] CVE-2022-26486
https://nvd.nist.gov/vuln/detail/CVE-2022-26486
[ 18 ] CVE-2022-28281
https://nvd.nist.gov/vuln/detail/CVE-2022-28281
[ 19 ] CVE-2022-28282
https://nvd.nist.gov/vuln/detail/CVE-2022-28282
[ 20 ] CVE-2022-28283
https://nvd.nist.gov/vuln/detail/CVE-2022-28283
[ 21 ] CVE-2022-28284
https://nvd.nist.gov/vuln/detail/CVE-2022-28284
[ 22 ] CVE-2022-28285
https://nvd.nist.gov/vuln/detail/CVE-2022-28285
[ 23 ] CVE-2022-28286
https://nvd.nist.gov/vuln/detail/CVE-2022-28286
[ 24 ] CVE-2022-28287
https://nvd.nist.gov/vuln/detail/CVE-2022-28287
[ 25 ] CVE-2022-28288
https://nvd.nist.gov/vuln/detail/CVE-2022-28288
[ 26 ] CVE-2022-28289
https://nvd.nist.gov/vuln/detail/CVE-2022-28289
[ 27 ] CVE-2022-29909
https://nvd.nist.gov/vuln/detail/CVE-2022-29909
[ 28 ] CVE-2022-29910
https://nvd.nist.gov/vuln/detail/CVE-2022-29910
[ 29 ] CVE-2022-29911
https://nvd.nist.gov/vuln/detail/CVE-2022-29911
[ 30 ] CVE-2022-29912
https://nvd.nist.gov/vuln/detail/CVE-2022-29912
[ 31 ] CVE-2022-29914
https://nvd.nist.gov/vuln/detail/CVE-2022-29914
[ 32 ] CVE-2022-29915
https://nvd.nist.gov/vuln/detail/CVE-2022-29915
[ 33 ] CVE-2022-29916
https://nvd.nist.gov/vuln/detail/CVE-2022-29916
[ 34 ] CVE-2022-29917
https://nvd.nist.gov/vuln/detail/CVE-2022-29917
[ 35 ] CVE-2022-29918
https://nvd.nist.gov/vuln/detail/CVE-2022-29918
[ 36 ] CVE-2022-31736
https://nvd.nist.gov/vuln/detail/CVE-2022-31736
[ 37 ] CVE-2022-31737
https://nvd.nist.gov/vuln/detail/CVE-2022-31737
[ 38 ] CVE-2022-31738
https://nvd.nist.gov/vuln/detail/CVE-2022-31738
[ 39 ] CVE-2022-31740
https://nvd.nist.gov/vuln/detail/CVE-2022-31740
[ 40 ] CVE-2022-31741
https://nvd.nist.gov/vuln/detail/CVE-2022-31741
[ 41 ] CVE-2022-31742
https://nvd.nist.gov/vuln/detail/CVE-2022-31742
[ 42 ] CVE-2022-31743
https://nvd.nist.gov/vuln/detail/CVE-2022-31743
[ 43 ] CVE-2022-31744
https://nvd.nist.gov/vuln/detail/CVE-2022-31744
[ 44 ] CVE-2022-31745
https://nvd.nist.gov/vuln/detail/CVE-2022-31745
[ 45 ] CVE-2022-31747
https://nvd.nist.gov/vuln/detail/CVE-2022-31747
[ 46 ] CVE-2022-31748
https://nvd.nist.gov/vuln/detail/CVE-2022-31748
[ 47 ] CVE-2022-34468
https://nvd.nist.gov/vuln/detail/CVE-2022-34468
[ 48 ] CVE-2022-34469
https://nvd.nist.gov/vuln/detail/CVE-2022-34469
[ 49 ] CVE-2022-34470
https://nvd.nist.gov/vuln/detail/CVE-2022-34470
[ 50 ] CVE-2022-34471
https://nvd.nist.gov/vuln/detail/CVE-2022-34471
[ 51 ] CVE-2022-34472
https://nvd.nist.gov/vuln/detail/CVE-2022-34472
[ 52 ] CVE-2022-34473
https://nvd.nist.gov/vuln/detail/CVE-2022-34473
[ 53 ] CVE-2022-34474
https://nvd.nist.gov/vuln/detail/CVE-2022-34474
[ 54 ] CVE-2022-34475
https://nvd.nist.gov/vuln/detail/CVE-2022-34475
[ 55 ] CVE-2022-34476
https://nvd.nist.gov/vuln/detail/CVE-2022-34476
[ 56 ] CVE-2022-34477
https://nvd.nist.gov/vuln/detail/CVE-2022-34477
[ 57 ] CVE-2022-34478
https://nvd.nist.gov/vuln/detail/CVE-2022-34478
[ 58 ] CVE-2022-34479
https://nvd.nist.gov/vuln/detail/CVE-2022-34479
[ 59 ] CVE-2022-34480
https://nvd.nist.gov/vuln/detail/CVE-2022-34480
[ 60 ] CVE-2022-34481
https://nvd.nist.gov/vuln/detail/CVE-2022-34481
[ 61 ] CVE-2022-34482
https://nvd.nist.gov/vuln/detail/CVE-2022-34482
[ 62 ] CVE-2022-34483
https://nvd.nist.gov/vuln/detail/CVE-2022-34483
[ 63 ] CVE-2022-34484
https://nvd.nist.gov/vuln/detail/CVE-2022-34484
[ 64 ] CVE-2022-34485
https://nvd.nist.gov/vuln/detail/CVE-2022-34485
[ 65 ] CVE-2022-36315
https://nvd.nist.gov/vuln/detail/CVE-2022-36315
[ 66 ] CVE-2022-36316
https://nvd.nist.gov/vuln/detail/CVE-2022-36316
[ 67 ] CVE-2022-36318
https://nvd.nist.gov/vuln/detail/CVE-2022-36318
[ 68 ] CVE-2022-36319
https://nvd.nist.gov/vuln/detail/CVE-2022-36319
[ 69 ] CVE-2022-36320
https://nvd.nist.gov/vuln/detail/CVE-2022-36320
[ 70 ] MFSA-2022-14

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

https://security.gentoo.org/glsa/202208-08

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.

License
=======

Copyright 2022 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

https://creativecommons.org/licenses/by-sa/2.5