Bugzilla Automation <bugzi...@freebsd.org> has asked freebsd-gecko (Nobody) <ge...@freebsd.org> for maintainer-feedback: Bug 273766: www/firefox < 117.0 and mail/thunderbird < 102.15.0 have critical security vuln https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=273766
--- Description --- This was reported today: https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/ "Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of this issue being exploited in other products in the wild."