Bug 877773 (CVE-2022-42930, CVE-2022-42931) – <www-client/firefox{-bin,}-{102.4.0,106.0}: multiple vulnerabilities

• Product: Gentoo Security
• Status: RESOLVED FIXED

[Description John Helmert III 2022-10-20 17:46:30 UTC]

https://www.mozilla.org/en-US/security/advisories/mfsa2022-45/
https://www.mozilla.org/en-US/security/advisories/mfsa2022-44/

Please stabilize when ready, thanks!

[Comment 1 Larry the Git Cow 2022-10-25 11:35:50 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cc0ce1b48a008f73ec9105b7ced559062a5ad613

commit cc0ce1b48a008f73ec9105b7ced559062a5ad613
Author:     Joonas Niilola <[e-mail]>
AuthorDate: 2022-10-25 11:35:30 +0000
Commit:     Joonas Niilola <[e-mail]>
CommitDate: 2022-10-25 11:35:47 +0000

    www-client/firefox: drop 102.3.0, 105.0.2, 106.0
    
    Bug: https://bugs.gentoo.org/877773
    Signed-off-by: Joonas Niilola <[e-mail]>

 www-client/firefox/Manifest               |  297 -------
 www-client/firefox/firefox-102.3.0.ebuild | 1266 ---------------------------
 www-client/firefox/firefox-105.0.2.ebuild | 1323 -----------------------------
 www-client/firefox/firefox-106.0.ebuild   | 1321 ----------------------------
 4 files changed, 4207 deletions(-)

[Comment 2 John Helmert III 2022-10-25 21:36:07 UTC]

Thanks!

[Comment 3 John Helmert III 2022-10-31 15:49:27 UTC]

GLSA request filed

[Comment 4 Larry the Git Cow 2022-10-31 20:01:56 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=9769eb5d5b659339ccd728b1e78cd503bed0b83c

commit 9769eb5d5b659339ccd728b1e78cd503bed0b83c
Author:     GLSAMaker <[e-mail]>
AuthorDate: 2022-10-31 19:59:57 +0000
Commit:     John Helmert III <[e-mail]>
CommitDate: 2022-10-31 20:01:43 +0000

    [ GLSA 202210-34 ] Mozilla Firefox: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/877773
    Signed-off-by: GLSAMaker <[e-mail]>
    Signed-off-by: John Helmert III <[e-mail]>

 glsa-202210-34.xml | 76 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 76 insertions(+)

[Comment 5 John Helmert III 2022-10-31 20:02:31 UTC]

GLSA released, all done!