Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 866215 (CVE-2022-38474, CVE-2022-38475)

Summary: <www-client/firefox{-bin,}-{91.13.0,104}: multiple vulnerabilities
Product: Gentoo Security Reporter: John Helmert III <ajak>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: RESOLVED FIXED    
Severity: major CC: mozilla
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: A2 [glsa+]
Package list:
Runtime testing required: ---
Bug Depends on: 866302    
Bug Blocks: 866213    

Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-08-23 19:17:28 UTC
See tracker for details. Please stabilize firefox-91.13.0.
Comment 1 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-08-24 22:56:37 UTC
Thanks, please cleanup!
Comment 2 Larry the Git Cow gentoo-dev 2022-08-25 04:25:38 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=63e594669dc851bfb07aad2cc81f000d0c2af865

commit 63e594669dc851bfb07aad2cc81f000d0c2af865
Author:     Joonas Niilola <juippis@gentoo.org>
AuthorDate: 2022-08-25 04:24:26 +0000
Commit:     Joonas Niilola <juippis@gentoo.org>
CommitDate: 2022-08-25 04:24:26 +0000

    www-client/firefox: drop 91.12.0, 102.1.0, 103.0.2
    
    Bug: https://bugs.gentoo.org/866215
    Signed-off-by: Joonas Niilola <juippis@gentoo.org>

 www-client/firefox/Manifest               |  295 -------
 www-client/firefox/firefox-102.1.0.ebuild | 1284 ----------------------------
 www-client/firefox/firefox-103.0.2.ebuild | 1286 -----------------------------
 www-client/firefox/firefox-91.12.0.ebuild | 1236 ---------------------------
 4 files changed, 4101 deletions(-)
Comment 3 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-08-28 20:52:15 UTC
GLSA request filed
Comment 4 Larry the Git Cow gentoo-dev 2022-08-31 23:37:21 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=6bdaf831e892710990b8ef821bd177c465de6814

commit 6bdaf831e892710990b8ef821bd177c465de6814
Author:     GLSAMaker <glsamaker@gentoo.org>
AuthorDate: 2022-08-31 23:36:29 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2022-08-31 23:37:06 +0000

    [ GLSA 202208-37 ] Mozilla Firefox: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/866215
    Signed-off-by: GLSAMaker <glsamaker@gentoo.org>
    Signed-off-by: Sam James <sam@gentoo.org>

 glsa-202208-37.xml | 77 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 77 insertions(+)