id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
16202	Patch Seamonkey against CVE-2022-26485	Douglas R. Reno	Douglas R. Reno	"After doing a 'diff' between Firefox-91.6.0 and Firefox-91.6.1, I have the changes required to create a patch for Seamonkey.

Seamonkey does not carry WebGPU, so it is immune to CVE-2022-26486. However, it does have the XSLT processor (albeit in a different location), and the code is almost identical to the 'before' section in the diff.

As a result of this, Seamonkey will need to be patched against CVE-2022-26485, which is the Critical severity Use-After-Free (which is actively exploited in the wild)."	enhancement	closed	high	11.2	BOOK	git	critical	fixed