70 matches found
RLSA-2022:0818 Critical: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.7.0 ESR. Security Fixes: Mozilla: Use-after-free in XSLT parameter processing CVE-2022-26485 Mozilla: Use-after-free in WebGPU IPC Framework...
[SECURITY] [DLA 2942-1] firefox-esr security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2942-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 10, 2022 https://wiki.debian.org/LTS -...
Mozilla release Security Advisories for multiple vulnerabilities affecting Firefox and Firefox ESR
THREAT LEVEL: Green. For a detailed advisory, download the pdf file here Mozilla addressed multiple security vulnerabilities by releasing two security advisories and four of the bugs have high impact. One of the four vulnerabilities is a Time-of-Check Time-of-Use bug CVE-2022-26387, which occurs...
[slackware-security] mozilla-thunderbird
New mozilla-thunderbird packages are available for Slackware 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-91.7.0-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For mor...
Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2022-068-01)
The version of mozilla-thunderbird installed on the remote host is prior to 91.7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-068-01 advisory. - If an attacker could control the contents of an iframe sandboxed with allow-popups but not allow-scripts, the...
[SECURITY] [DSA 5097-1] firefox-esr security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5097-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 09, 2022 https://www.debian.org/security/faq -...
CVE-2022-26384
If an attacker could control the contents of an iframe sandboxed with allow-popups but not allow-scripts, they were able to craft a link that, when clicked, would lead to JavaScript execution in violation of the sandbox. This vulnerability affects Firefox 98, Firefox ESR 91.7, and Thunderbird 91....
KLA12484 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in tex...
Mozilla Firefox ESR < 91.7
The version of Firefox ESR installed on the remote Windows host is prior to 91.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-11 advisory. - If an attacker could control the contents of an iframe sandboxed with allow-popups but not allow-scripts, they were...
