Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 842438 (CVE-2022-29910, CVE-2022-29915, CVE-2022-29918) - <www-client/firefox{-bin,}-{91.9.0,100.0}: multiple vulnerabilities
Summary: <www-client/firefox{-bin,}-{91.9.0,100.0}: multiple vulnerabilities
Alias: CVE-2022-29910, CVE-2022-29915, CVE-2022-29918
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal major (vote)
Assignee: Gentoo Security
Whiteboard: A2 [glsa?]
Depends on: 842651
Blocks: CVE-2022-1196, CVE-2022-24713, CVE-2022-28281, CVE-2022-28282, CVE-2022-28285, CVE-2022-28286, CVE-2022-28289, CVE-2022-29909, CVE-2022-29911, CVE-2022-29912, CVE-2022-29914, CVE-2022-29916, CVE-2022-29917
  Show dependency tree
Reported: 2022-05-03 13:58 UTC by John Helmert III
Modified: 2022-05-16 18:00 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-05-03 13:58:46 UTC
ESR advisory:
Rapid advisory:

As usual, these contains memory handling issues which are presumed to
be exploitable to run arbitrary code. Waiting on firefox-100 bump.
Comment 1 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-05-10 16:05:01 UTC
Thanks, please cleanup!
Comment 2 Larry the Git Cow gentoo-dev 2022-05-16 06:25:35 UTC
The bug has been referenced in the following commit(s):

commit 521a8cae42cebe2829446aa7781cfea951d25e08
Author:     Joonas Niilola <>
AuthorDate: 2022-05-16 06:24:15 +0000
Commit:     Joonas Niilola <>
CommitDate: 2022-05-16 06:24:15 +0000

    www-client/firefox: drop 91.8.0, 99.0.1
    Signed-off-by: Joonas Niilola <>

 www-client/firefox/Manifest              |  197 -----
 www-client/firefox/firefox-91.8.0.ebuild | 1250 -----------------------------
 www-client/firefox/firefox-99.0.1.ebuild | 1264 ------------------------------
 3 files changed, 2711 deletions(-)