csaf_suse - suse-su-2023:4016-1

suse-su-2023:4016-1

Vulnerability from csaf_suse

Published

2023-10-09 17:22

Modified

2023-10-09 17:22

Summary

Security update for MozillaThunderbird

Notes

Title of the patch

Security update for MozillaThunderbird

Description of the patch

This update for MozillaThunderbird fixes the following issues: Security fixes: - CVE-2023-5217: Fixed a heap buffer overflow in libvpx. (bsc#1215814) - CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1. (bsc#1215575) - CVE-2023-5169: Out-of-bounds write in PathOps. (bsc#1215575) - CVE-2023-5171: Use-after-free in Ion Compiler. (bsc#1215575) - CVE-2023-5174: Double-free in process spawning on Windows. (bsc#1215575) - CVE-2023-5176: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. (bsc#1215575) Other fixes: - Mozilla Thunderbird 115.3.1 * fixed: In Unified Folders view, some folders had incorrect unified folder parent (bmo#1852525) * fixed: 'Edit message as new' did not restore encrypted subject from selected message (bmo#1788534) * fixed: Importing some CalDAV calendars with yearly recurrence events caused Thunderbird to freeze (bmo#1850732) * fixed: Security fixes MFSA 2023-44 (bsc#1215814) * CVE-2023-5217 (bmo#1855550) Heap buffer overflow in libvpx - Mozilla Thunderbird 115.3 * fixed: Thunderbird could not import profiles with hostname ending in dot ('.') (bmo#1825374) * fixed: Message header was occasionally missing in message preview (bmo#1840943) * fixed: Setting an existing folder's type flag did not add descendant folders to the Unified Folders view (bmo#1848904) * fixed: Thunderbird did not always delete all temporary mail files, sometimes preventing messages from being sent (bmo#673703) * fixed: Status bar in Message Compose window could not be hidden (bmo#1806860) * fixed: Message header was intermittently missing from message preview (bmo#1840943) * fixed: OAuth2 did not work on some profiles created in Thunderbird 102.6.1 or earlier (bmo#1814823) * fixed: In Vertical View, decrypted subject lines were displayed as ellipsis ('...') in message list (bmo#1831764) * fixed: Condensed address preference (mail.showCondensedAddresses) did not show condensed addresses in message list (bmo#1831280) * fixed: Spam folder could not be assigned non-ASCII names with IMAP UTF-8 enabled (bmo#1816332) * fixed: Message header was not displayed until images finished loading, causing noticeable delay for messages containing large images (bmo#1851871) * fixed: Large SVG favicons did not display on RSS feeds (bmo#1853895) * fixed: Context menu items did not display a hover background color (bmo#1852732) * fixed: Security fixes MFSA 2023-43 (bsc#1215575) * CVE-2023-5168 (bmo#1846683) Out-of-bounds write in FilterNodeD2D1 * CVE-2023-5169 (bmo#1846685) Out-of-bounds write in PathOps * CVE-2023-5171 (bmo#1851599) Use-after-free in Ion Compiler * CVE-2023-5174 (bmo#1848454) Double-free in process spawning on Windows * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824, bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983, bmo#1851195) Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 - Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build with newer binutils (bsc#1215309) - Fix i586 build by reducing debug info to -g1. (bsc#1210168) - Mozilla Thunderbird 115.2.3 * changed: Card view and vertical layout are now default for new profiles (bmo#1849000) * fixed: Go - Folder menu was disabled (bmo#1849919) * fixed: 'Tools' menu was blank when opened from compose window on macOS (bmo#1848155) * fixed: Deleting an attachment from a message on an IMAP server corrupted the local copy when configured with 'mark as deleted' (bmo#1135434) * fixed: Manually entered passwords were not remembered for OAuth-authenticated accounts such as Yahoo mail (bmo#1673446) * fixed: Quick Filter's 'Keep filters applied' did not persist after restarting Thunderbird (bmo#1846880,bmo#1849221) * fixed: Top-level Quick Filter settings did not persist after restart (bmo#1849249) * fixed: Notifications for new messages with non-ASCII characters in the subject were garbled (bmo#1842384) * fixed: 'Mark Thread As Read' did not work when some messages in thread were already read (bmo#1850850) * fixed: New Groups tab in NNTP subscribe dialog id not work as expected (bmo#1848366) * fixed: Negative values were allowed in 'Share for files larger than' field (bmo#1850281) * fixed: Thunderbird sometimes crashed when deleting a parent folder with subfolders (bmo#1851293) * fixed: 'Send Message Error' appeared intermittently while Thunderbird was idle (bmo#1801668) * fixed: Focused but not selected messages were missing visual indication of focus in card view (bmo#1844263) * fixed: Notification dot did not disappear from taskbar icon on Windows after messages had already been read (bmo#1824889) * fixed: Multiple selected messages could not be opened simultaneously if selection included more than 19 messages (bmo#1851563) * fixed: Email replies received via BCC incorrectly populated From field with default identity (bmo#1851512) * fixed: User was not always notified of message send failures in outbox (bmo#1851542) * fixed: Tag dialog did not close properly after editing tag (bmo#1852414) * fixed: Newsgroup field in compose window did not autocomplete with suggested newsgroup names (bmo#1670457) * fixed: Canceling newsgroup messages did not check if sender matched user's own identity (bmo#1823274) * fixed: Event dialog with several invitees expanded beyond screen height (bmo#1848261) * fixed: Message check boxes were partially obstructed in message list (bmo#1850760) * unresolved: Some folders missing from Unified Folders ()

Patchnames

SUSE-2023-4016,SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4016,SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4016,SUSE-SLE-Product-WE-15-SP4-2023-4016,SUSE-SLE-Product-WE-15-SP5-2023-4016,openSUSE-SLE-15.4-2023-4016,openSUSE-SLE-15.5-2023-4016

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for MozillaThunderbird",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for MozillaThunderbird fixes the following issues:\n\nSecurity fixes:\n- CVE-2023-5217: Fixed a heap buffer overflow in libvpx. (bsc#1215814)\n- CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1. (bsc#1215575)\n- CVE-2023-5169: Out-of-bounds write in PathOps. (bsc#1215575)\n- CVE-2023-5171: Use-after-free in Ion Compiler. (bsc#1215575)\n- CVE-2023-5174: Double-free in process spawning on Windows. (bsc#1215575)\n- CVE-2023-5176: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. (bsc#1215575)\n\nOther fixes:\n\n- Mozilla Thunderbird 115.3.1\n  * fixed: In Unified Folders view, some folders had incorrect\n    unified folder parent (bmo#1852525)\n  * fixed: \u0027Edit message as new\u0027 did not restore encrypted\n    subject from selected message (bmo#1788534)\n  * fixed: Importing some CalDAV calendars with yearly recurrence\n    events caused Thunderbird to freeze (bmo#1850732)\n  * fixed: Security fixes\n  MFSA 2023-44 (bsc#1215814)\n  * CVE-2023-5217 (bmo#1855550)\n    Heap buffer overflow in libvpx\n- Mozilla Thunderbird 115.3\n  * fixed: Thunderbird could not import profiles with hostname\n    ending in dot (\u0027.\u0027) (bmo#1825374)\n  * fixed: Message header was occasionally missing in message\n    preview (bmo#1840943)\n  * fixed: Setting an existing folder\u0027s type flag did not add\n    descendant folders to the Unified Folders view (bmo#1848904)\n  * fixed: Thunderbird did not always delete all temporary mail\n    files, sometimes preventing messages from being sent\n    (bmo#673703)\n  * fixed: Status bar in Message Compose window could not be\n    hidden (bmo#1806860)\n  * fixed: Message header was intermittently missing from message\n    preview (bmo#1840943)\n  * fixed: OAuth2 did not work on some profiles created in\n    Thunderbird 102.6.1 or earlier (bmo#1814823)\n  * fixed: In Vertical View, decrypted subject lines were\n    displayed as ellipsis (\u0027...\u0027) in message list (bmo#1831764)\n  * fixed: Condensed address preference\n    (mail.showCondensedAddresses) did not show condensed\n    addresses in message list (bmo#1831280)\n  * fixed: Spam folder could not be assigned non-ASCII names with\n    IMAP UTF-8 enabled (bmo#1816332)\n  * fixed: Message header was not displayed until images finished\n    loading, causing noticeable delay for messages containing\n    large images (bmo#1851871)\n  * fixed: Large SVG favicons did not display on RSS feeds\n    (bmo#1853895)\n  * fixed: Context menu items did not display a hover background\n    color (bmo#1852732)\n  * fixed: Security fixes\n  MFSA 2023-43 (bsc#1215575)\n  * CVE-2023-5168 (bmo#1846683)\n    Out-of-bounds write in FilterNodeD2D1\n  * CVE-2023-5169 (bmo#1846685)\n    Out-of-bounds write in PathOps\n  * CVE-2023-5171 (bmo#1851599)\n    Use-after-free in Ion Compiler\n  * CVE-2023-5174 (bmo#1848454)\n    Double-free in process spawning on Windows\n  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,\n    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,\n    bmo#1851195)\n    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,\n    and Thunderbird 115.3\n- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build\n  with newer binutils (bsc#1215309)\n- Fix i586 build by reducing debug info to -g1. (bsc#1210168)\n- Mozilla Thunderbird 115.2.3\n  * changed: Card view and vertical layout are now default for\n    new profiles (bmo#1849000)\n  * fixed: Go - Folder menu was disabled (bmo#1849919)\n  * fixed: \u0027Tools\u0027 menu was blank when opened from compose window\n    on macOS (bmo#1848155)\n  * fixed: Deleting an attachment from a message on an IMAP\n    server corrupted the local copy when configured with \u0027mark as\n    deleted\u0027 (bmo#1135434)\n  * fixed: Manually entered passwords were not remembered for\n    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)\n  * fixed: Quick Filter\u0027s \u0027Keep filters applied\u0027 did not persist\n    after restarting Thunderbird (bmo#1846880,bmo#1849221)\n  * fixed: Top-level Quick Filter settings did not persist after\n    restart (bmo#1849249)\n  * fixed: Notifications for new messages with non-ASCII\n    characters in the subject were garbled (bmo#1842384)\n  * fixed: \u0027Mark Thread As Read\u0027 did not work when some messages\n    in thread were already read (bmo#1850850)\n  * fixed: New Groups tab in NNTP subscribe dialog id not work as\n    expected (bmo#1848366)\n  * fixed: Negative values were allowed in \u0027Share for files\n    larger than\u0027 field (bmo#1850281)\n  * fixed: Thunderbird sometimes crashed when deleting a parent\n    folder with subfolders (bmo#1851293)\n  * fixed: \u0027Send Message Error\u0027 appeared intermittently while\n    Thunderbird was idle (bmo#1801668)\n  * fixed: Focused but not selected messages were missing visual\n    indication of focus in card view (bmo#1844263)\n  * fixed: Notification dot did not disappear from taskbar icon\n    on Windows after messages had already been read (bmo#1824889)\n  * fixed: Multiple selected messages could not be opened\n    simultaneously if selection included more than 19 messages\n    (bmo#1851563)\n  * fixed: Email replies received via BCC incorrectly populated\n    From field with default identity (bmo#1851512)\n  * fixed: User was not always notified of message send failures\n    in outbox (bmo#1851542)\n  * fixed: Tag dialog did not close properly after editing tag\n    (bmo#1852414)\n  * fixed: Newsgroup field in compose window did not autocomplete\n    with suggested newsgroup names (bmo#1670457)\n  * fixed: Canceling newsgroup messages did not check if sender\n    matched user\u0027s own identity (bmo#1823274)\n  * fixed: Event dialog with several invitees expanded beyond\n    screen height (bmo#1848261)\n  * fixed: Message check boxes were partially obstructed in\n    message list (bmo#1850760)\n  * unresolved: Some folders missing from Unified Folders ()\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2023-4016,SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4016,SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4016,SUSE-SLE-Product-WE-15-SP4-2023-4016,SUSE-SLE-Product-WE-15-SP5-2023-4016,openSUSE-SLE-15.4-2023-4016,openSUSE-SLE-15.5-2023-4016",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_4016-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2023:4016-1",
        "url": "https://www.suse.com/support/update/announcement/2023/suse-su-20234016-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2023:4016-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-October/016575.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1210168",
        "url": "https://bugzilla.suse.com/1210168"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1215309",
        "url": "https://bugzilla.suse.com/1215309"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1215575",
        "url": "https://bugzilla.suse.com/1215575"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1215814",
        "url": "https://bugzilla.suse.com/1215814"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-5168 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-5168/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-5169 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-5169/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-5171 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-5171/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-5174 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-5174/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-5176 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-5176/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-5217 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-5217/"
      }
    ],
    "title": "Security update for MozillaThunderbird",
    "tracking": {
      "current_release_date": "2023-10-09T17:22:59Z",
      "generator": {
        "date": "2023-10-09T17:22:59Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2023:4016-1",
      "initial_release_date": "2023-10-09T17:22:59Z",
      "revision_history": [
        {
          "date": "2023-10-09T17:22:59Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
                  "product_id": "MozillaThunderbird-115.3.1-150200.8.133.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-115.3.1-150200.8.133.1.i686",
                "product": {
                  "name": "MozillaThunderbird-115.3.1-150200.8.133.1.i686",
                  "product_id": "MozillaThunderbird-115.3.1-150200.8.133.1.i686"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.i686",
                "product": {
                  "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.i686",
                  "product_id": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.i686"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.i686",
                "product": {
                  "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.i686",
                  "product_id": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.i686"
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
                  "product_id": "MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
                  "product_id": "MozillaThunderbird-115.3.1-150200.8.133.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
                  "product_id": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
                  "product_id": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
                  "product_id": "MozillaThunderbird-115.3.1-150200.8.133.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Package Hub 15 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Package Hub 15 SP4",
                  "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Package Hub 15 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Package Hub 15 SP5",
                  "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:15:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Workstation Extension 15 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Workstation Extension 15 SP4",
                  "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-we:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Workstation Extension 15 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Workstation Extension 15 SP5",
                  "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-we:15:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.4",
                "product": {
                  "name": "openSUSE Leap 15.4",
                  "product_id": "openSUSE Leap 15.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.5",
                "product": {
                  "name": "openSUSE Leap 15.5",
                  "product_id": "openSUSE Leap 15.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-115.3.1-150200.8.133.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-115.3.1-150200.8.133.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x"
        },
        "product_reference": "MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-115.3.1-150200.8.133.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-115.3.1-150200.8.133.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x"
        },
        "product_reference": "MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-115.3.1-150200.8.133.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP4",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP4",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP4",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-115.3.1-150200.8.133.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP5",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP5",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP5",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-115.3.1-150200.8.133.1.aarch64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-115.3.1-150200.8.133.1.s390x as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x"
        },
        "product_reference": "MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-115.3.1-150200.8.133.1.x86_64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-115.3.1-150200.8.133.1.aarch64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-115.3.1-150200.8.133.1.s390x as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x"
        },
        "product_reference": "MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-115.3.1-150200.8.133.1.x86_64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-5168",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-5168"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process.\n*This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox \u003c 118, Firefox ESR \u003c 115.3, and Thunderbird \u003c 115.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-5168",
          "url": "https://www.suse.com/security/cve/CVE-2023-5168"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215575 for CVE-2023-5168",
          "url": "https://bugzilla.suse.com/1215575"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-10-09T17:22:59Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2023-5168"
    },
    {
      "cve": "CVE-2023-5169",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-5169"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process. This vulnerability affects Firefox \u003c 118, Firefox ESR \u003c 115.3, and Thunderbird \u003c 115.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-5169",
          "url": "https://www.suse.com/security/cve/CVE-2023-5169"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215575 for CVE-2023-5169",
          "url": "https://bugzilla.suse.com/1215575"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-10-09T17:22:59Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2023-5169"
    },
    {
      "cve": "CVE-2023-5171",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-5171"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects Firefox \u003c 118, Firefox ESR \u003c 115.3, and Thunderbird \u003c 115.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-5171",
          "url": "https://www.suse.com/security/cve/CVE-2023-5171"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215575 for CVE-2023-5171",
          "url": "https://bugzilla.suse.com/1215575"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-10-09T17:22:59Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2023-5171"
    },
    {
      "cve": "CVE-2023-5174",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-5174"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free and a potentially exploitable crash.\n*This bug only affects Firefox on Windows when run in non-standard configurations (such as using `runas`). Other operating systems are unaffected.* This vulnerability affects Firefox \u003c 118, Firefox ESR \u003c 115.3, and Thunderbird \u003c 115.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-5174",
          "url": "https://www.suse.com/security/cve/CVE-2023-5174"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215575 for CVE-2023-5174",
          "url": "https://bugzilla.suse.com/1215575"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-10-09T17:22:59Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2023-5174"
    },
    {
      "cve": "CVE-2023-5176",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-5176"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 118, Firefox ESR \u003c 115.3, and Thunderbird \u003c 115.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-5176",
          "url": "https://www.suse.com/security/cve/CVE-2023-5176"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215575 for CVE-2023-5176",
          "url": "https://bugzilla.suse.com/1215575"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-10-09T17:22:59Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2023-5176"
    },
    {
      "cve": "CVE-2023-5217",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-5217"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-5217",
          "url": "https://www.suse.com/security/cve/CVE-2023-5217"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215776 for CVE-2023-5217",
          "url": "https://bugzilla.suse.com/1215776"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215778 for CVE-2023-5217",
          "url": "https://bugzilla.suse.com/1215778"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215814 for CVE-2023-5217",
          "url": "https://bugzilla.suse.com/1215814"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217559 for CVE-2023-5217",
          "url": "https://bugzilla.suse.com/1217559"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-115.3.1-150200.8.133.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-115.3.1-150200.8.133.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-10-09T17:22:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-5217"
    }
  ]
}

CVE-2023-5174 (GCVE-0-2023-5174)

Vulnerability from cvelistv5

Published

2023-09-27 14:13

Modified

2025-05-05 14:59

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Double-free in process spawning on Windows

Summary

If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free and a potentially exploitable crash. *This bug only affects Firefox on Windows when run in non-standard configurations (such as using `runas`). Other operating systems are unaffected.* This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1848454
	https://www.mozilla.org/security/advisories/mfsa2023-41/
	https://www.mozilla.org/security/advisories/mfsa2023-42/
	https://www.mozilla.org/security/advisories/mfsa2023-43/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 118

	Mozilla	Firefox ESR	Version: unspecified < 115.3
	Mozilla	Thunderbird	Version: unspecified < 115.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:52:07.541Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1848454"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-41/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-42/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-43/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-5174",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:27:08.668376Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T14:59:34.904Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "118",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Ronald Crane"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free and a potentially exploitable crash.\u003cbr\u003e*This bug only affects Firefox on Windows when run in non-standard configurations (such as using \u003ccode\u003erunas\u003c/code\u003e). Other operating systems are unaffected.* This vulnerability affects Firefox \u003c 118, Firefox ESR \u003c 115.3, and Thunderbird \u003c 115.3."
            }
          ],
          "value": "If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free and a potentially exploitable crash.\n*This bug only affects Firefox on Windows when run in non-standard configurations (such as using `runas`). Other operating systems are unaffected.* This vulnerability affects Firefox \u003c 118, Firefox ESR \u003c 115.3, and Thunderbird \u003c 115.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Double-free in process spawning on Windows",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-27T14:13:19.990Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1848454"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-41/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-42/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-43/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-5174",
    "datePublished": "2023-09-27T14:13:19.990Z",
    "dateReserved": "2023-09-25T15:03:43.655Z",
    "dateUpdated": "2025-05-05T14:59:34.904Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-5169 (GCVE-0-2023-5169)

Vulnerability from cvelistv5

Published

2023-09-27 14:13

Modified

2025-02-13 17:19

Severity ?

CWE

Out-of-bounds write in PathOps

Summary

A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1846685
	https://www.mozilla.org/security/advisories/mfsa2023-41/
	https://www.mozilla.org/security/advisories/mfsa2023-42/
	https://www.mozilla.org/security/advisories/mfsa2023-43/
	https://www.debian.org/security/2023/dsa-5506
	https://lists.debian.org/debian-lts-announce/2023/09/msg00034.html
	https://www.debian.org/security/2023/dsa-5513
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/
	https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 118

	Mozilla	Firefox ESR	Version: unspecified < 115.3
	Mozilla	Thunderbird	Version: unspecified < 115.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:52:07.308Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846685"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-41/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-42/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-43/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5506"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00034.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5513"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-5169",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-23T19:25:15.758715Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-23T19:25:25.016Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "118",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "sonakkbi"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A compromised content process could have provided malicious data in a \u003ccode\u003ePathRecording\u003c/code\u003e resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process. This vulnerability affects Firefox \u003c 118, Firefox ESR \u003c 115.3, and Thunderbird \u003c 115.3."
            }
          ],
          "value": "A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process. This vulnerability affects Firefox \u003c 118, Firefox ESR \u003c 115.3, and Thunderbird \u003c 115.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out-of-bounds write in PathOps",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-09T15:06:23.557Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846685"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-41/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-42/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-43/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5506"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00034.html"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5513"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-5169",
    "datePublished": "2023-09-27T14:13:08.573Z",
    "dateReserved": "2023-09-25T15:03:41.394Z",
    "dateUpdated": "2025-02-13T17:19:46.801Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-5176 (GCVE-0-2023-5176)

Vulnerability from cvelistv5

Published

2023-09-27 14:13

Modified

2025-05-01 17:53

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3

Summary

Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.

References

►

URL

Tags

	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1836353%2C1842674%2C1843824%2C1843962%2C1848890%2C1850180%2C1850983%2C1851195
	https://www.mozilla.org/security/advisories/mfsa2023-41/
	https://www.mozilla.org/security/advisories/mfsa2023-42/
	https://www.mozilla.org/security/advisories/mfsa2023-43/
	https://www.debian.org/security/2023/dsa-5506
	https://lists.debian.org/debian-lts-announce/2023/09/msg00034.html
	https://www.debian.org/security/2023/dsa-5513
	https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 118

	Mozilla	Firefox ESR	Version: unspecified < 115.3
	Mozilla	Thunderbird	Version: unspecified < 115.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:52:07.759Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3",
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1836353%2C1842674%2C1843824%2C1843962%2C1848890%2C1850180%2C1850983%2C1851195"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-41/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-42/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-43/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5506"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00034.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5513"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-5176",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:27:06.971475Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-01T17:53:11.846Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "118",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Chris Peterson, Andrew McCreight, Andr\u00e9 Bargull, Nika Layzell and the Mozilla Fuzzing Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 118, Firefox ESR \u003c 115.3, and Thunderbird \u003c 115.3."
            }
          ],
          "value": "Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 118, Firefox ESR \u003c 115.3, and Thunderbird \u003c 115.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-09T15:06:21.738Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1836353%2C1842674%2C1843824%2C1843962%2C1848890%2C1850180%2C1850983%2C1851195"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-41/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-42/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-43/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5506"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00034.html"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5513"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-5176",
    "datePublished": "2023-09-27T14:13:25.411Z",
    "dateReserved": "2023-09-25T15:03:44.531Z",
    "dateUpdated": "2025-05-01T17:53:11.846Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-5171 (GCVE-0-2023-5171)

Vulnerability from cvelistv5

Published

2023-09-27 14:13

Modified

2025-02-13 17:19

Severity ?

CWE

Use-after-free in Ion Compiler

Summary

During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1851599
	https://www.mozilla.org/security/advisories/mfsa2023-41/
	https://www.mozilla.org/security/advisories/mfsa2023-42/
	https://www.mozilla.org/security/advisories/mfsa2023-43/
	https://www.debian.org/security/2023/dsa-5506
	https://lists.debian.org/debian-lts-announce/2023/09/msg00034.html
	https://www.debian.org/security/2023/dsa-5513
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/
	https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 118

	Mozilla	Firefox ESR	Version: unspecified < 115.3
	Mozilla	Thunderbird	Version: unspecified < 115.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:52:07.557Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1851599"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-41/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-42/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-43/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5506"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00034.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5513"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-5171",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-23T19:24:47.238155Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-23T19:24:55.774Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "118",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Lukas Bernhard"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects Firefox \u003c 118, Firefox ESR \u003c 115.3, and Thunderbird \u003c 115.3."
            }
          ],
          "value": "During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects Firefox \u003c 118, Firefox ESR \u003c 115.3, and Thunderbird \u003c 115.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in Ion Compiler",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-09T15:06:15.632Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1851599"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-41/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-42/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-43/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5506"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00034.html"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5513"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-5171",
    "datePublished": "2023-09-27T14:13:12.642Z",
    "dateReserved": "2023-09-25T15:03:42.289Z",
    "dateUpdated": "2025-02-13T17:19:49.191Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-5168 (GCVE-0-2023-5168)

Vulnerability from cvelistv5

Published

2023-09-27 14:12

Modified

2025-05-01 20:13

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Out-of-bounds write in FilterNodeD2D1

Summary

A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1846683
	https://www.mozilla.org/security/advisories/mfsa2023-41/
	https://www.mozilla.org/security/advisories/mfsa2023-42/
	https://www.mozilla.org/security/advisories/mfsa2023-43/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 118

	Mozilla	Firefox ESR	Version: unspecified < 115.3
	Mozilla	Thunderbird	Version: unspecified < 115.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:52:07.322Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846683"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-41/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-42/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-43/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-5168",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:27:10.568093Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-01T20:13:54.748Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "118",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "sonakkbi"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A compromised content process could have provided malicious data to \u003ccode\u003eFilterNodeD2D1\u003c/code\u003e resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process.\u003cbr\u003e*This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox \u003c 118, Firefox ESR \u003c 115.3, and Thunderbird \u003c 115.3."
            }
          ],
          "value": "A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process.\n*This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox \u003c 118, Firefox ESR \u003c 115.3, and Thunderbird \u003c 115.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out-of-bounds write in FilterNodeD2D1",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-10T14:47:08.847Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846683"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-41/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-42/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-43/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-5168",
    "datePublished": "2023-09-27T14:12:58.905Z",
    "dateReserved": "2023-09-25T15:03:40.914Z",
    "dateUpdated": "2025-05-01T20:13:54.748Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-5217 (GCVE-0-2023-5217)

Vulnerability from cvelistv5

Published

2023-09-28 15:23

Modified

2025-07-30 01:37

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Heap buffer overflow

Summary

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References

►

URL

Tags

	https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html
	https://crbug.com/1486441
	http://www.openwall.com/lists/oss-security/2023/09/28/5
	http://www.openwall.com/lists/oss-security/2023/09/28/6
	http://www.openwall.com/lists/oss-security/2023/09/29/1
	http://www.openwall.com/lists/oss-security/2023/09/29/2
	http://www.openwall.com/lists/oss-security/2023/09/29/7
	http://www.openwall.com/lists/oss-security/2023/09/29/9
	https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/
	https://security-tracker.debian.org/tracker/CVE-2023-5217
	https://bugzilla.redhat.com/show_bug.cgi?id=2241191
	https://stackdiary.com/google-discloses-a-webm-vp8-bug-tracked-as-cve-2023-5217/
	https://www.openwall.com/lists/oss-security/2023/09/28/5
	https://pastebin.com/TdkC4pDv
	https://github.com/webmproject/libvpx/commit/3fbd1dca6a4d2dad332a2110d646e4ffef36d590
	https://github.com/webmproject/libvpx/commit/af6dedd715f4307669366944cca6e0417b290282
	https://github.com/webmproject/libvpx/tags
	http://www.openwall.com/lists/oss-security/2023/09/29/11
	http://www.openwall.com/lists/oss-security/2023/09/29/12
	http://www.openwall.com/lists/oss-security/2023/09/29/14
	https://www.debian.org/security/2023/dsa-5510
	https://www.debian.org/security/2023/dsa-5509
	https://www.debian.org/security/2023/dsa-5508
	http://www.openwall.com/lists/oss-security/2023/09/30/1
	https://lists.debian.org/debian-lts-announce/2023/09/msg00038.html
	https://twitter.com/maddiestone/status/1707163313711497266
	https://arstechnica.com/security/2023/09/new-0-day-in-chrome-and-firefox-is-likely-to-plague-other-software/
	https://github.com/webmproject/libvpx/releases/tag/v1.13.1
	http://www.openwall.com/lists/oss-security/2023/09/30/3
	http://www.openwall.com/lists/oss-security/2023/09/30/2
	http://www.openwall.com/lists/oss-security/2023/09/30/4
	http://www.openwall.com/lists/oss-security/2023/09/30/5
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BCVSHVX2RFBU3RMCUFSATVQEJUFD4Q63/
	http://www.openwall.com/lists/oss-security/2023/10/01/2
	http://www.openwall.com/lists/oss-security/2023/10/01/1
	http://www.openwall.com/lists/oss-security/2023/10/01/5
	https://lists.debian.org/debian-lts-announce/2023/10/msg00001.html
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/55YVCZNAVY3Y5E4DWPWMX2SPKZ2E5SOV/
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MFWDFJSSIFKWKNOCTQCFUNZWAXUCSS4/
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWEJYS5NC7KVFYU3OAMPKQDYN6JQGVK6/
	http://www.openwall.com/lists/oss-security/2023/10/02/6
	http://www.openwall.com/lists/oss-security/2023/10/03/11
	https://security.gentoo.org/glsa/202310-04
	https://support.apple.com/kb/HT213961
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/
	http://seclists.org/fulldisclosure/2023/Oct/12
	https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html
	https://support.apple.com/kb/HT213972
	http://seclists.org/fulldisclosure/2023/Oct/16
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/
	https://security.gentoo.org/glsa/202401-34

Impacted products

Vendor

Product

Version

►

Google

Chrome

Version: 117.0.5938.132 < 117.0.5938.132

Google

libvpx

Version: 1.13.1 < 1.13.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:52:08.351Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://crbug.com/1486441"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/28/5"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/28/6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/29/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/29/2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/29/7"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/29/9"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security-tracker.debian.org/tracker/CVE-2023-5217"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2241191"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://stackdiary.com/google-discloses-a-webm-vp8-bug-tracked-as-cve-2023-5217/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2023/09/28/5"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://pastebin.com/TdkC4pDv"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/webmproject/libvpx/commit/3fbd1dca6a4d2dad332a2110d646e4ffef36d590"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/webmproject/libvpx/commit/af6dedd715f4307669366944cca6e0417b290282"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/webmproject/libvpx/tags"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/29/11"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/29/12"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/29/14"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5510"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5509"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5508"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/30/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00038.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://twitter.com/maddiestone/status/1707163313711497266"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://arstechnica.com/security/2023/09/new-0-day-in-chrome-and-firefox-is-likely-to-plague-other-software/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/webmproject/libvpx/releases/tag/v1.13.1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/30/3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/30/2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/30/4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/30/5"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BCVSHVX2RFBU3RMCUFSATVQEJUFD4Q63/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/10/01/2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/10/01/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/10/01/5"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00001.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/55YVCZNAVY3Y5E4DWPWMX2SPKZ2E5SOV/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MFWDFJSSIFKWKNOCTQCFUNZWAXUCSS4/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWEJYS5NC7KVFYU3OAMPKQDYN6JQGVK6/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/10/02/6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/10/03/11"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202310-04"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213961"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2023/Oct/12"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213972"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2023/Oct/16"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-34"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-5217",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2023-11-15T16:38:17.360361Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2023-10-02",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-5217"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-30T01:37:15.657Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "timeline": [
          {
            "lang": "en",
            "time": "2023-10-02T00:00:00+00:00",
            "value": "CVE-2023-5217 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "117.0.5938.132",
              "status": "affected",
              "version": "117.0.5938.132",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "libvpx",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "1.13.1",
              "status": "affected",
              "version": "1.13.1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Heap buffer overflow",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-31T17:08:56.596Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html"
        },
        {
          "url": "https://crbug.com/1486441"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/28/5"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/28/6"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/29/1"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/29/2"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/29/7"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/29/9"
        },
        {
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/"
        },
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2023-5217"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2241191"
        },
        {
          "url": "https://stackdiary.com/google-discloses-a-webm-vp8-bug-tracked-as-cve-2023-5217/"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2023/09/28/5"
        },
        {
          "url": "https://pastebin.com/TdkC4pDv"
        },
        {
          "url": "https://github.com/webmproject/libvpx/commit/3fbd1dca6a4d2dad332a2110d646e4ffef36d590"
        },
        {
          "url": "https://github.com/webmproject/libvpx/commit/af6dedd715f4307669366944cca6e0417b290282"
        },
        {
          "url": "https://github.com/webmproject/libvpx/tags"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/29/11"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/29/12"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/29/14"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5510"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5509"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5508"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/30/1"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00038.html"
        },
        {
          "url": "https://twitter.com/maddiestone/status/1707163313711497266"
        },
        {
          "url": "https://arstechnica.com/security/2023/09/new-0-day-in-chrome-and-firefox-is-likely-to-plague-other-software/"
        },
        {
          "url": "https://github.com/webmproject/libvpx/releases/tag/v1.13.1"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/30/3"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/30/2"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/30/4"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/30/5"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BCVSHVX2RFBU3RMCUFSATVQEJUFD4Q63/"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/10/01/2"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/10/01/1"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/10/01/5"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00001.html"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/55YVCZNAVY3Y5E4DWPWMX2SPKZ2E5SOV/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MFWDFJSSIFKWKNOCTQCFUNZWAXUCSS4/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWEJYS5NC7KVFYU3OAMPKQDYN6JQGVK6/"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/10/02/6"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/10/03/11"
        },
        {
          "url": "https://security.gentoo.org/glsa/202310-04"
        },
        {
          "url": "https://support.apple.com/kb/HT213961"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/"
        },
        {
          "url": "http://seclists.org/fulldisclosure/2023/Oct/12"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html"
        },
        {
          "url": "https://support.apple.com/kb/HT213972"
        },
        {
          "url": "http://seclists.org/fulldisclosure/2023/Oct/16"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-34"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2023-5217",
    "datePublished": "2023-09-28T15:23:18.340Z",
    "dateReserved": "2023-09-27T01:52:05.679Z",
    "dateUpdated": "2025-07-30T01:37:15.657Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2023:4016-1

Vulnerability from csaf_suse

CVE-2023-5174 (GCVE-0-2023-5174)

Vulnerability from cvelistv5

CVE-2023-5169 (GCVE-0-2023-5169)

Vulnerability from cvelistv5

CVE-2023-5176 (GCVE-0-2023-5176)

Vulnerability from cvelistv5

CVE-2023-5171 (GCVE-0-2023-5171)

Vulnerability from cvelistv5

CVE-2023-5168 (GCVE-0-2023-5168)

Vulnerability from cvelistv5

CVE-2023-5217 (GCVE-0-2023-5217)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature