Path to this page:
Subject: CVS commit: pkgsrc/www
From: Nia Alarie
Date: 2022-09-06 11:16:42
Message id: 20220906091642.7BC5AFA90@cvs.NetBSD.org
Log Message:
firefox102: Update to 102.2.0
Mozilla Foundation Security Advisory 2022-34
Security Vulnerabilities fixed in Firefox ESR 102.2
#CVE-2022-38472: Address bar spoofing via XSLT error handling
#CVE-2022-38473: Cross-origin XSLT Documents would have inherited the
parent's permissions
#CVE-2022-38476: Data race and potential use-after-free in PK11_ChangePW
#CVE-2022-38477: Memory safety bugs fixed in Firefox 104 and Firefox ESR
102.2
#CVE-2022-38478: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
and Firefox ESR 91.13
Files: