Gentoo 2503 Published by

A Mozilla Firefox security update has been released for Gentoo Linux.



GLSA 202208-08 : Mozilla Firefox: Multiple Vulnerabilities


- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 202208-08
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  https://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: High
Title: Mozilla Firefox: Multiple Vulnerabilities
Date: August 10, 2022
Bugs: #834631, #834804, #836866, #842438, #846593, #849044, #857045, #861515
ID: 202208-08

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======
Multiple vulnerabilities have been found in Mozilla Firefox, the worst
of which could result in the arbitrary execution of code.

Background
=========
Mozilla Firefox is a popular open-source web browser from the Mozilla
project.

Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 www-client/firefox < 91.12.0:esr >= 91.12.0:esr
< 103.0:rapid >= 103.0:rapid
2 www-client/firefox-bin < 91.12.0:esr >= 91.12.0:esr
< 103.0:rapid >= 103.0:rapid

Description
==========
Multiple vulnerabilities have been discovered in Mozilla Firefox. Please
review the CVE identifiers referenced below for details.

Impact
=====
Please review the referenced CVE identifiers for details.

Workaround
=========
There is no known workaround at this time.

Resolution
=========
All Mozilla Firefox ESR users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/firefox-91.12.0:esr"

All Mozilla Firefox ESR binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/firefox-bin-91.12.0:esr"

All Mozilla Firefox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/firefox-103.0:rapid"

All Mozilla Firefox binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/firefox-bin-103.0:rapid"

References
=========
[ 1 ] CVE-2022-0843
  https://nvd.nist.gov/vuln/detail/CVE-2022-0843
[ 2 ] CVE-2022-1196
  https://nvd.nist.gov/vuln/detail/CVE-2022-1196
[ 3 ] CVE-2022-1529
  https://nvd.nist.gov/vuln/detail/CVE-2022-1529
[ 4 ] CVE-2022-1802
  https://nvd.nist.gov/vuln/detail/CVE-2022-1802
[ 5 ] CVE-2022-1919
  https://nvd.nist.gov/vuln/detail/CVE-2022-1919
[ 6 ] CVE-2022-2200
  https://nvd.nist.gov/vuln/detail/CVE-2022-2200
[ 7 ] CVE-2022-2505
  https://nvd.nist.gov/vuln/detail/CVE-2022-2505
[ 8 ] CVE-2022-24713
  https://nvd.nist.gov/vuln/detail/CVE-2022-24713
[ 9 ] CVE-2022-26381
  https://nvd.nist.gov/vuln/detail/CVE-2022-26381
[ 10 ] CVE-2022-26382
  https://nvd.nist.gov/vuln/detail/CVE-2022-26382
[ 11 ] CVE-2022-26383
  https://nvd.nist.gov/vuln/detail/CVE-2022-26383
[ 12 ] CVE-2022-26384
  https://nvd.nist.gov/vuln/detail/CVE-2022-26384
[ 13 ] CVE-2022-26385
  https://nvd.nist.gov/vuln/detail/CVE-2022-26385
[ 14 ] CVE-2022-26386
  https://nvd.nist.gov/vuln/detail/CVE-2022-26386
[ 15 ] CVE-2022-26387
  https://nvd.nist.gov/vuln/detail/CVE-2022-26387
[ 16 ] CVE-2022-26485
  https://nvd.nist.gov/vuln/detail/CVE-2022-26485
[ 17 ] CVE-2022-26486
  https://nvd.nist.gov/vuln/detail/CVE-2022-26486
[ 18 ] CVE-2022-28281
  https://nvd.nist.gov/vuln/detail/CVE-2022-28281
[ 19 ] CVE-2022-28282
  https://nvd.nist.gov/vuln/detail/CVE-2022-28282
[ 20 ] CVE-2022-28283
  https://nvd.nist.gov/vuln/detail/CVE-2022-28283
[ 21 ] CVE-2022-28284
  https://nvd.nist.gov/vuln/detail/CVE-2022-28284
[ 22 ] CVE-2022-28285
  https://nvd.nist.gov/vuln/detail/CVE-2022-28285
[ 23 ] CVE-2022-28286
  https://nvd.nist.gov/vuln/detail/CVE-2022-28286
[ 24 ] CVE-2022-28287
  https://nvd.nist.gov/vuln/detail/CVE-2022-28287
[ 25 ] CVE-2022-28288
  https://nvd.nist.gov/vuln/detail/CVE-2022-28288
[ 26 ] CVE-2022-28289
  https://nvd.nist.gov/vuln/detail/CVE-2022-28289
[ 27 ] CVE-2022-29909
  https://nvd.nist.gov/vuln/detail/CVE-2022-29909
[ 28 ] CVE-2022-29910
  https://nvd.nist.gov/vuln/detail/CVE-2022-29910
[ 29 ] CVE-2022-29911
  https://nvd.nist.gov/vuln/detail/CVE-2022-29911
[ 30 ] CVE-2022-29912
  https://nvd.nist.gov/vuln/detail/CVE-2022-29912
[ 31 ] CVE-2022-29914
  https://nvd.nist.gov/vuln/detail/CVE-2022-29914
[ 32 ] CVE-2022-29915
  https://nvd.nist.gov/vuln/detail/CVE-2022-29915
[ 33 ] CVE-2022-29916
  https://nvd.nist.gov/vuln/detail/CVE-2022-29916
[ 34 ] CVE-2022-29917
  https://nvd.nist.gov/vuln/detail/CVE-2022-29917
[ 35 ] CVE-2022-29918
  https://nvd.nist.gov/vuln/detail/CVE-2022-29918
[ 36 ] CVE-2022-31736
  https://nvd.nist.gov/vuln/detail/CVE-2022-31736
[ 37 ] CVE-2022-31737
  https://nvd.nist.gov/vuln/detail/CVE-2022-31737
[ 38 ] CVE-2022-31738
  https://nvd.nist.gov/vuln/detail/CVE-2022-31738
[ 39 ] CVE-2022-31740
  https://nvd.nist.gov/vuln/detail/CVE-2022-31740
[ 40 ] CVE-2022-31741
  https://nvd.nist.gov/vuln/detail/CVE-2022-31741
[ 41 ] CVE-2022-31742
  https://nvd.nist.gov/vuln/detail/CVE-2022-31742
[ 42 ] CVE-2022-31743
  https://nvd.nist.gov/vuln/detail/CVE-2022-31743
[ 43 ] CVE-2022-31744
  https://nvd.nist.gov/vuln/detail/CVE-2022-31744
[ 44 ] CVE-2022-31745
  https://nvd.nist.gov/vuln/detail/CVE-2022-31745
[ 45 ] CVE-2022-31747
  https://nvd.nist.gov/vuln/detail/CVE-2022-31747
[ 46 ] CVE-2022-31748
  https://nvd.nist.gov/vuln/detail/CVE-2022-31748
[ 47 ] CVE-2022-34468
  https://nvd.nist.gov/vuln/detail/CVE-2022-34468
[ 48 ] CVE-2022-34469
  https://nvd.nist.gov/vuln/detail/CVE-2022-34469
[ 49 ] CVE-2022-34470
  https://nvd.nist.gov/vuln/detail/CVE-2022-34470
[ 50 ] CVE-2022-34471
  https://nvd.nist.gov/vuln/detail/CVE-2022-34471
[ 51 ] CVE-2022-34472
  https://nvd.nist.gov/vuln/detail/CVE-2022-34472
[ 52 ] CVE-2022-34473
  https://nvd.nist.gov/vuln/detail/CVE-2022-34473
[ 53 ] CVE-2022-34474
  https://nvd.nist.gov/vuln/detail/CVE-2022-34474
[ 54 ] CVE-2022-34475
  https://nvd.nist.gov/vuln/detail/CVE-2022-34475
[ 55 ] CVE-2022-34476
  https://nvd.nist.gov/vuln/detail/CVE-2022-34476
[ 56 ] CVE-2022-34477
  https://nvd.nist.gov/vuln/detail/CVE-2022-34477
[ 57 ] CVE-2022-34478
  https://nvd.nist.gov/vuln/detail/CVE-2022-34478
[ 58 ] CVE-2022-34479
  https://nvd.nist.gov/vuln/detail/CVE-2022-34479
[ 59 ] CVE-2022-34480
  https://nvd.nist.gov/vuln/detail/CVE-2022-34480
[ 60 ] CVE-2022-34481
  https://nvd.nist.gov/vuln/detail/CVE-2022-34481
[ 61 ] CVE-2022-34482
  https://nvd.nist.gov/vuln/detail/CVE-2022-34482
[ 62 ] CVE-2022-34483
  https://nvd.nist.gov/vuln/detail/CVE-2022-34483
[ 63 ] CVE-2022-34484
  https://nvd.nist.gov/vuln/detail/CVE-2022-34484
[ 64 ] CVE-2022-34485
  https://nvd.nist.gov/vuln/detail/CVE-2022-34485
[ 65 ] CVE-2022-36315
  https://nvd.nist.gov/vuln/detail/CVE-2022-36315
[ 66 ] CVE-2022-36316
  https://nvd.nist.gov/vuln/detail/CVE-2022-36316
[ 67 ] CVE-2022-36318
  https://nvd.nist.gov/vuln/detail/CVE-2022-36318
[ 68 ] CVE-2022-36319
  https://nvd.nist.gov/vuln/detail/CVE-2022-36319
[ 69 ] CVE-2022-36320
  https://nvd.nist.gov/vuln/detail/CVE-2022-36320
[ 70 ] MFSA-2022-14

Availability
===========
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

  https://security.gentoo.org/glsa/202208-08

Concerns?
========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
  https://bugs.gentoo.org.

License
======
Copyright 2022 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

  https://creativecommons.org/licenses/by-sa/2.5