CVE-2022-46871 · cross-distro fix matrix

CVE-2022-46871: An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited. This vulnerability affects Firefox < 108.

Affects 8 Linux releases across 14 (distro × package) combinations.

Fix per ecosystem

Each block below is a distro release where CVE-2022-46871 has a known fix. Run the listed command on that distro to remediate.

Source: Debian Security Tracker

firefox-esr→ fixed in102.7.0esr-1~deb11u1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y firefox-esr
```
libusrsctp→ fixed in0.9.3.0+20201007-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libusrsctp
```
thunderbird→ fixed in1:102.8.0-1~deb11u1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y thunderbird
```

Source: Debian Security Tracker

firefox-esr→ fixed in102.7.0esr-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y firefox-esr
```
libusrsctp→ fixed in0.9.3.0+20201007-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libusrsctp
```
thunderbird→ fixed in1:102.7.1-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y thunderbird
```

Source: Debian Security Tracker

firefox-esr→ fixed in102.7.0esr-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y firefox-esr
```
libusrsctp→ fixed in0.9.3.0+20201007-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libusrsctp
```
thunderbird→ fixed in1:102.7.1-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y thunderbird
```