Bug 872059 – <www-client/firefox{-bin,}-{102.3.0,105.0}: multiple vulnerabilities

• Product: Gentoo Security
• Status: RESOLVED FIXED

[Description John Helmert III 2022-09-20 14:35:10 UTC]

https://www.mozilla.org/en-US/security/advisories/mfsa2022-40/
https://www.mozilla.org/en-US/security/advisories/mfsa2022-41/

Please bump to Firefox 105 and ESR 102.3.

[Comment 1 John Helmert III 2022-09-20 16:48:17 UTC]

Thanks for bumps! Please stabilize as necessary.

[Comment 2 John Helmert III 2022-09-23 21:16:54 UTC]

Popping out for tracker. Mozilla released the Thunderbird advisory much later in the day so I missed it.

[Comment 3 Joonas Niilola 2022-09-25 06:43:01 UTC]

Tree should be fine now.

[Comment 4 John Helmert III 2022-09-25 13:26:25 UTC]

Indeed, thanks!

[Comment 5 John Helmert III 2022-09-26 14:09:20 UTC]

GLSA request filed

[Comment 6 Larry the Git Cow 2022-09-29 14:48:55 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=423ddf8af24c3cf1486229480c2c24ed81d77ba6

commit 423ddf8af24c3cf1486229480c2c24ed81d77ba6
Author:     GLSAMaker <[e-mail]>
AuthorDate: 2022-09-29 14:25:20 +0000
Commit:     John Helmert III <[e-mail]>
CommitDate: 2022-09-29 14:48:03 +0000

    [ GLSA 202209-27 ] Mozilla Firefox: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/872059
    Signed-off-by: GLSAMaker <[e-mail]>
    Signed-off-by: John Helmert III <[e-mail]>

 glsa-202209-27.xml | 76 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 76 insertions(+)

[Comment 7 John Helmert III 2022-09-29 14:54:51 UTC]

GLSA released, all done!

[Comment 8 John Helmert III 2022-09-29 14:56:19 UTC]

Still depending on the stablereq but seems like we're only blocked on hppa there, unrelated to Firefox.