firefox-esr - security update

Fixed packages 2

Vulnerabilities 8

• Critical 9.8
  CVE-2022-34470

  Session history navigations may have led to a use-after-free and potentially exploitable crash. This vulnerability affe…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-2200 EPSS 24%

  If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScr…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-34468

  An iframe that was not permitted to run scripts could do so if the user clicked on a <code>javascript:</code> link. Thi…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-34481

  In the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have occurred when the numbe…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-34484

  The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of these bugs showed evi…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-31744

  An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so b…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-34479

  A malicious website that could create a popup could have resized the popup to overlay the address bar with its own cont…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 4.3
  CVE-2022-34472

  If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022