6b008fde01
Mozilla Foundation Security Advisory 2022-25 Security Vulnerabilities fixed in Firefox ESR 91.11 #CVE-2022-34479: A popup window could be resized in a way to overlay the address bar with web content #CVE-2022-34470: Use-after-free in nsSHistory #CVE-2022-34468: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI #CVE-2022-34481: Potential integer overflow in ReplaceElementsAt #CVE-2022-31744: CSP bypass enabling stylesheet injection #CVE-2022-34472: Unavailable PAC file resulted in OCSP requests being blocked #CVE-2022-34478: Microsoft protocols can be attacked if a user accepts a prompt #CVE-2022-2200: Undesired attributes could be set as part of prototype pollution #CVE-2022-34484: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11 |
||
---|---|---|
.. | ||
files | ||
patches | ||
DESCR | ||
distinfo | ||
Makefile | ||
mozilla-common.mk | ||
options.mk | ||
PLIST | ||
PLIST.Linux |