CVE-2022-38472 · cross-distro fix matrix

CVE-2022-38472: An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar. This could have been used to fool the user into submitting data intended for the spoofed origin. This vulnerability affects Thunderbird < 102.2, Thun

Affects 8 Linux releases across 11 (distro × package) combinations.

Fix per ecosystem

Each block below is a distro release where CVE-2022-38472 has a known fix. Run the listed command on that distro to remediate.

Source: Debian Security Tracker

firefox-esr→ fixed in91.13.0esr-1~deb11u1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y firefox-esr
```
thunderbird→ fixed in1:91.13.0-1~deb11u1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y thunderbird
```

Source: Debian Security Tracker

firefox-esr→ fixed in102.2.0esr-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y firefox-esr
```
thunderbird→ fixed in1:102.2.0-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y thunderbird
```

Source: Debian Security Tracker

firefox-esr→ fixed in102.2.0esr-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y firefox-esr
```
thunderbird→ fixed in1:102.2.0-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y thunderbird
```