firefox-esr - security update

Fixed packages 1

Vulnerabilities 7

• High 8.8
  CVE-2022-40962

  Mozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the Mozilla Fuzzing Team report…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-40957

  Inconsistent data in instruction and data cache when creating wasm code could lead to a potentially exploitable crash.<…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-40958

  By injecting a cookie with certain special characters, an attacker on a shared subdomain which is not a secure context …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-40959

  During iframe navigation, certain pages did not have their FeaturePolicy fully initialized leading to a bypass that lea…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-40960

  Concurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a use-after-free causing a…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.1
  CVE-2022-40956

  When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected ele…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 5.5
  CVE-2022-3266

  An out-of-bounds read can occur when decoding H264 video. This results in a potentially exploitable crash. This vulnera…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022