opensuse-su-2016:2254-1
Vulnerability from csaf_opensuse
Published
2016-09-06 18:46
Modified
2016-09-06 18:46
Summary
Security update for MozillaThunderbird
Notes
Title of the patch
Security update for MozillaThunderbird
Description of the patch
This update for MozillaThunderbird fixes the following issues:
- update to Thunderbird 45.3.0 (boo#991809)
* Disposition-Notification-To could not be used in
mail.compose.other.header
* 'edit as new message' on a received message pre-filled the sender
as the composing identity.
* Certain messages caused corruption of the drafts summary database.
security fixes:
* MFSA 2016-62/CVE-2016-2836
Miscellaneous memory safety hazards
* MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
Favicon network connection can persist when page is closed
* MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
Buffer overflow rendering SVG with bidirectional content
* MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
* MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
Stack underflow during 2D graphics rendering
* MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
Use-after-free when using alt key and toplevel menus
* MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
Use-after-free in DTLS during WebRTC session shutdown
* MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
Use-after-free in service workers with nested sync events
* MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
Scripts on marquee tag can execute in sandboxed iframes
* MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
Buffer overflow in ClearKey Content Decryption Module (CDM)
during video playback
* MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
Type confusion in display transformation
* MFSA 2016-79/CVE-2016-5264 (bmo#1286183)
Use-after-free when applying SVG effects
* MFSA 2016-80/CVE-2016-5265 (bmo#1278013)
Same-origin policy violation using local HTML file and saved shortcut file
- Fix for possible buffer overrun (boo#990856)
CVE-2016-6354 (bmo#1292534)
[mozilla-flex_buffer_overrun.patch]
- add a screenshot to appdata.xml
Patchnames
openSUSE-2016-1057
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for MozillaThunderbird",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for MozillaThunderbird fixes the following issues:\n\n- update to Thunderbird 45.3.0 (boo#991809)\n * Disposition-Notification-To could not be used in\n mail.compose.other.header\n * \u0027edit as new message\u0027 on a received message pre-filled the sender\n as the composing identity.\n * Certain messages caused corruption of the drafts summary database.\n security fixes:\n * MFSA 2016-62/CVE-2016-2836\n Miscellaneous memory safety hazards\n * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)\n Favicon network connection can persist when page is closed\n * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)\n Buffer overflow rendering SVG with bidirectional content\n * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)\n Cairo rendering crash due to memory allocation issue with FFmpeg 0.10\n * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)\n Stack underflow during 2D graphics rendering\n * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)\n Use-after-free when using alt key and toplevel menus\n * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)\n Use-after-free in DTLS during WebRTC session shutdown\n * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)\n Use-after-free in service workers with nested sync events\n * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)\n Scripts on marquee tag can execute in sandboxed iframes\n * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)\n Buffer overflow in ClearKey Content Decryption Module (CDM)\n during video playback\n * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)\n Type confusion in display transformation\n * MFSA 2016-79/CVE-2016-5264 (bmo#1286183)\n Use-after-free when applying SVG effects\n * MFSA 2016-80/CVE-2016-5265 (bmo#1278013)\n Same-origin policy violation using local HTML file and saved shortcut file\n\n- Fix for possible buffer overrun (boo#990856)\n CVE-2016-6354 (bmo#1292534)\n [mozilla-flex_buffer_overrun.patch]\n\n- add a screenshot to appdata.xml\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2016-1057",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2016_2254-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 990856",
"url": "https://bugzilla.suse.com/990856"
},
{
"category": "self",
"summary": "SUSE Bug 991809",
"url": "https://bugzilla.suse.com/991809"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2830 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2836 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2836/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2837 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2837/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2838 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2838/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2839 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2839/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5252 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5252/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5254 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5254/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5258 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5258/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5259 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5259/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5262 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5262/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5263 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5263/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5264 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5264/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5265 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5265/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6354 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6354/"
}
],
"title": "Security update for MozillaThunderbird",
"tracking": {
"current_release_date": "2016-09-06T18:46:14Z",
"generator": {
"date": "2016-09-06T18:46:14Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2016:2254-1",
"initial_release_date": "2016-09-06T18:46:14Z",
"revision_history": [
{
"date": "2016-09-06T18:46:14Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-45.3.0-9.1.aarch64",
"product": {
"name": "MozillaThunderbird-45.3.0-9.1.aarch64",
"product_id": "MozillaThunderbird-45.3.0-9.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"product": {
"name": "MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"product_id": "MozillaThunderbird-devel-45.3.0-9.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"product": {
"name": "MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"product_id": "MozillaThunderbird-translations-common-45.3.0-9.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"product": {
"name": "MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"product_id": "MozillaThunderbird-translations-other-45.3.0-9.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-45.3.0-9.1.s390x",
"product": {
"name": "MozillaThunderbird-45.3.0-9.1.s390x",
"product_id": "MozillaThunderbird-45.3.0-9.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-devel-45.3.0-9.1.s390x",
"product": {
"name": "MozillaThunderbird-devel-45.3.0-9.1.s390x",
"product_id": "MozillaThunderbird-devel-45.3.0-9.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"product": {
"name": "MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"product_id": "MozillaThunderbird-translations-common-45.3.0-9.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"product": {
"name": "MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"product_id": "MozillaThunderbird-translations-other-45.3.0-9.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-45.3.0-9.1.x86_64",
"product": {
"name": "MozillaThunderbird-45.3.0-9.1.x86_64",
"product_id": "MozillaThunderbird-45.3.0-9.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"product": {
"name": "MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"product_id": "MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"product": {
"name": "MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"product_id": "MozillaThunderbird-devel-45.3.0-9.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"product": {
"name": "MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"product_id": "MozillaThunderbird-translations-common-45.3.0-9.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-45.3.0-9.1.x86_64",
"product": {
"name": "MozillaThunderbird-translations-other-45.3.0-9.1.x86_64",
"product_id": "MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Package Hub 12",
"product": {
"name": "SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:packagehub:12"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-45.3.0-9.1.aarch64 as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64"
},
"product_reference": "MozillaThunderbird-45.3.0-9.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-45.3.0-9.1.s390x as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x"
},
"product_reference": "MozillaThunderbird-45.3.0-9.1.s390x",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-45.3.0-9.1.x86_64 as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64"
},
"product_reference": "MozillaThunderbird-45.3.0-9.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64 as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64"
},
"product_reference": "MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-devel-45.3.0-9.1.aarch64 as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64"
},
"product_reference": "MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-devel-45.3.0-9.1.s390x as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x"
},
"product_reference": "MozillaThunderbird-devel-45.3.0-9.1.s390x",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-devel-45.3.0-9.1.x86_64 as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64"
},
"product_reference": "MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-45.3.0-9.1.aarch64 as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64"
},
"product_reference": "MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-45.3.0-9.1.s390x as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x"
},
"product_reference": "MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-45.3.0-9.1.x86_64 as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64"
},
"product_reference": "MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-45.3.0-9.1.aarch64 as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64"
},
"product_reference": "MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-45.3.0-9.1.s390x as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x"
},
"product_reference": "MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-45.3.0-9.1.x86_64 as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
},
"product_reference": "MozillaThunderbird-translations-other-45.3.0-9.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-2830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2830"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used for favicon resource retrieval after the associated browser window is closed, which makes it easier for remote web servers to track users by observing network traffic from multiple IP addresses.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2830",
"url": "https://www.suse.com/security/cve/CVE-2016-2830"
},
{
"category": "external",
"summary": "SUSE Bug 983922 for CVE-2016-2830",
"url": "https://bugzilla.suse.com/983922"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-2830",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-06T18:46:14Z",
"details": "moderate"
}
],
"title": "CVE-2016-2830"
},
{
"cve": "CVE-2016-2836",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2836"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to Http2Session::Shutdown and SpdySession31::Shutdown, and other vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2836",
"url": "https://www.suse.com/security/cve/CVE-2016-2836"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-2836",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-06T18:46:14Z",
"details": "moderate"
}
],
"title": "CVE-2016-2836"
},
{
"cve": "CVE-2016-2837",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2837"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media Extensions (EME) API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and leveraging a Gecko Media Plugin (GMP) sandbox bypass.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2837",
"url": "https://www.suse.com/security/cve/CVE-2016-2837"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-2837",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-06T18:46:14Z",
"details": "moderate"
}
],
"title": "CVE-2016-2837"
},
{
"cve": "CVE-2016-2838",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2838"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via directional content in an SVG document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2838",
"url": "https://www.suse.com/security/cve/CVE-2016-2838"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-2838",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-06T18:46:14Z",
"details": "moderate"
}
],
"title": "CVE-2016-2838"
},
{
"cve": "CVE-2016-2839",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2839"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo _cairo_surface_get_extents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service (application crash) via a crafted video.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2839",
"url": "https://www.suse.com/security/cve/CVE-2016-2839"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-2839",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-06T18:46:14Z",
"details": "moderate"
}
],
"title": "CVE-2016-2839"
},
{
"cve": "CVE-2016-5252",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5252"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5252",
"url": "https://www.suse.com/security/cve/CVE-2016-5252"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-5252",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-06T18:46:14Z",
"details": "moderate"
}
],
"title": "CVE-2016-5252"
},
{
"cve": "CVE-2016-5254",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5254"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) by leveraging keyboard access to use the Alt key during selection of top-level menu items.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5254",
"url": "https://www.suse.com/security/cve/CVE-2016-5254"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-5254",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-06T18:46:14Z",
"details": "moderate"
}
],
"title": "CVE-2016-5254"
},
{
"cve": "CVE-2016-5258",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5258"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5258",
"url": "https://www.suse.com/security/cve/CVE-2016-5258"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-5258",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-06T18:46:14Z",
"details": "moderate"
}
],
"title": "CVE-2016-5258"
},
{
"cve": "CVE-2016-5259",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5259"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5259",
"url": "https://www.suse.com/security/cve/CVE-2016-5259"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-5259",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-06T18:46:14Z",
"details": "moderate"
}
],
"title": "CVE-2016-5259"
},
{
"cve": "CVE-2016-5262",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5262"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox=\"allow-scripts\" attribute value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5262",
"url": "https://www.suse.com/security/cve/CVE-2016-5262"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-5262",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-06T18:46:14Z",
"details": "moderate"
}
],
"title": "CVE-2016-5262"
},
{
"cve": "CVE-2016-5263",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5263"
}
],
"notes": [
{
"category": "general",
"text": "The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary code via a crafted web site that leverages \"type confusion.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5263",
"url": "https://www.suse.com/security/cve/CVE-2016-5263"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-5263",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-06T18:46:14Z",
"details": "moderate"
}
],
"title": "CVE-2016-5263"
},
{
"cve": "CVE-2016-5264",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5264"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG element that is mishandled during effect application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5264",
"url": "https://www.suse.com/security/cve/CVE-2016-5264"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-5264",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-06T18:46:14Z",
"details": "moderate"
}
],
"title": "CVE-2016-5264"
},
{
"cve": "CVE-2016-5265",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5265"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (UXSS) attacks or read arbitrary files, by arranging for the presence of a crafted HTML document and a crafted shortcut file in the same local directory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5265",
"url": "https://www.suse.com/security/cve/CVE-2016-5265"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-5265",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-06T18:46:14Z",
"details": "moderate"
}
],
"title": "CVE-2016-5265"
},
{
"cve": "CVE-2016-6354",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6354"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6354",
"url": "https://www.suse.com/security/cve/CVE-2016-6354"
},
{
"category": "external",
"summary": "SUSE Bug 1026047 for CVE-2016-6354",
"url": "https://bugzilla.suse.com/1026047"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2016-6354",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2016-6354",
"url": "https://bugzilla.suse.com/1035209"
},
{
"category": "external",
"summary": "SUSE Bug 990856 for CVE-2016-6354",
"url": "https://bugzilla.suse.com/990856"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-devel-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-45.3.0-9.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.aarch64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.s390x",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-45.3.0-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-06T18:46:14Z",
"details": "low"
}
],
"title": "CVE-2016-6354"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…