BSD PortsMozilla -- privilege escalation attack
[email protected] reports: The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks.
Affected versions
- firefox < 134.0,2
- librewolf < 134.0
- firefox-esr < 128.6.0
- thunderbird < 128.6
By system
2 still vulnerable, 5 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| DragonFly | www/firefox | 131.0_1,2 | vulnerable since 2025-04-04 | |
| OpenBSD | www/mozilla-firefox | 158.0.1 | out of range, by version | |
| NetBSD | www/firefox | 154.0.1nb1 | not listed | |
| MidnightBSD | www/firefox | 158.0.1,2 | out of range, by version | |
| FreeBSD | www/firefox | 158.0.1,2 | fixed | (495 days after) |
| FreeBSD | www/librewolf | 158.0.1 | fixed | (484 days after) |
| OpenBSD | www/librewolf | 158.0pl1 | out of range, by version | |
| DragonFly | www/firefox-esr | 128.12.0,1 | fixed | |
| OpenBSD | www/firefox-esr | 153.5.1 | out of range, by version | |
| NetBSD | www/firefox-esr | 140 | not listed | |
| MidnightBSD | www/firefox-esr | 153.5.1,1 | out of range, by version | |
| FreeBSD | www/firefox-esr | 153.5.1,2 | fixed | (467 days after) |
| DragonFly | mail/thunderbird | 128.3.0_2 | vulnerable since 2025-04-04 | |
| OpenBSD | mail/mozilla-thunderbird | 153.5.1 | out of range, by version | |
| NetBSD | mail/thunderbird | 154.0nb1 | not listed | |
| MidnightBSD | mail/thunderbird | 158.0.1 | out of range, by version | |
| FreeBSD | mail/thunderbird | 158.0.1 | fixed | (494 days after) |