csaf_suse - suse-su-2024:3629-1

suse-su-2024:3629-1

Vulnerability from csaf_suse

Published

2024-10-15 06:57

Modified

2024-10-15 06:57

Summary

Security update for MozillaThunderbird

Notes

Title of the patch

Security update for MozillaThunderbird

Description of the patch

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.3.1 (MFSA 2024-51, bsc#1231413): - CVE-2024-9680: Use-after-free in Animation timeline Update to Mozilla Thunderbird 128.3 (MFSA 2024-49, bsc#1230979): - CVE-2024-9392: Compromised content process can bypass site isolation - CVE-2024-9393: Cross-origin access to PDF contents through multipart responses - CVE-2024-9394: Cross-origin access to JSON contents through multipart responses - CVE-2024-8900: Clipboard write permission bypass - CVE-2024-9396: Potential memory corruption may occur when cloning certain objects - CVE-2024-9397: Potential directory upload bypass via clickjacking - CVE-2024-9398: External protocol handlers could be enumerated via popups - CVE-2024-9399: Specially crafted WebTransport requests could lead to denial of service - CVE-2024-9400: Potential memory corruption during JIT compilation - CVE-2024-9401: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 - CVE-2024-9402: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 Other fixes: - fixed: Opening an EML file with a 'mailto:' link did not work - fixed: Collapsed POP3 account folder was expanded after emptying trash on exit - fixed: 'Mark Folder Read' on a cross-folder search marked all underlying folders read - fixed: Unable to open/view attached OpenPGP encrypted messages - fixed: Unable to 'Decrypt and Open' an attached OpenPGP key file - fixed: Subject could disappear when replying to a message saved in an EML file - fixed: OAuth2 authentication method was not available when adding SMTP server - fixed: Unable to subscribe to .ics calendars in some situations - fixed: Visual and UX improvements

Patchnames

SUSE-2024-3629,SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3629,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3629,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3629,SUSE-SLE-Product-WE-15-SP5-2024-3629,SUSE-SLE-Product-WE-15-SP6-2024-3629,openSUSE-SLE-15.5-2024-3629,openSUSE-SLE-15.6-2024-3629

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for MozillaThunderbird",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for MozillaThunderbird fixes the following issues:\n\nUpdate to Mozilla Thunderbird 128.3.1 (MFSA 2024-51, bsc#1231413):\n\n- CVE-2024-9680: Use-after-free in Animation timeline   \n    \nUpdate to Mozilla Thunderbird 128.3 (MFSA 2024-49, bsc#1230979):\n\n- CVE-2024-9392: Compromised content process can bypass site isolation\n- CVE-2024-9393: Cross-origin access to PDF contents through multipart responses\n- CVE-2024-9394: Cross-origin access to JSON contents through multipart responses\n- CVE-2024-8900: Clipboard write permission bypass\n- CVE-2024-9396: Potential memory corruption may occur when cloning certain objects\n- CVE-2024-9397: Potential directory upload bypass via clickjacking\n- CVE-2024-9398: External protocol handlers could be enumerated via popups\n- CVE-2024-9399: Specially crafted WebTransport requests could lead to denial of service\n- CVE-2024-9400: Potential memory corruption during JIT compilation\n- CVE-2024-9401: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3\n- CVE-2024-9402: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3\n    \nOther fixes:\n\n- fixed: Opening an EML file with a \u0027mailto:\u0027 link did not work\n- fixed: Collapsed POP3 account folder was expanded after emptying trash on exit\n- fixed: \u0027Mark Folder Read\u0027 on a cross-folder search marked all underlying folders read\n- fixed: Unable to open/view attached OpenPGP encrypted messages\n- fixed: Unable to \u0027Decrypt and Open\u0027 an attached OpenPGP key file\n- fixed: Subject could disappear when replying to a message saved in an EML file\n- fixed: OAuth2 authentication method was not available when adding SMTP server\n- fixed: Unable to subscribe to .ics calendars in some situations\n- fixed: Visual and UX improvements\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2024-3629,SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3629,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3629,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3629,SUSE-SLE-Product-WE-15-SP5-2024-3629,SUSE-SLE-Product-WE-15-SP6-2024-3629,openSUSE-SLE-15.5-2024-3629,openSUSE-SLE-15.6-2024-3629",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_3629-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2024:3629-1",
        "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243629-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2024:3629-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-October/019602.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1230979",
        "url": "https://bugzilla.suse.com/1230979"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1231413",
        "url": "https://bugzilla.suse.com/1231413"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-8900 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-8900/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-9392 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-9392/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-9393 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-9393/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-9394 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-9394/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-9396 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-9396/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-9397 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-9397/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-9398 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-9398/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-9399 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-9399/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-9400 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-9400/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-9401 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-9401/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-9402 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-9402/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-9680 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-9680/"
      }
    ],
    "title": "Security update for MozillaThunderbird",
    "tracking": {
      "current_release_date": "2024-10-15T06:57:38Z",
      "generator": {
        "date": "2024-10-15T06:57:38Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2024:3629-1",
      "initial_release_date": "2024-10-15T06:57:38Z",
      "revision_history": [
        {
          "date": "2024-10-15T06:57:38Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
                  "product_id": "MozillaThunderbird-128.3.0-150200.8.182.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
                  "product_id": "MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
                  "product_id": "MozillaThunderbird-128.3.0-150200.8.182.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
                  "product_id": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
                  "product_id": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
                  "product_id": "MozillaThunderbird-128.3.0-150200.8.182.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Package Hub 15 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Package Hub 15 SP5",
                  "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:15:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                  "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Workstation Extension 15 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Workstation Extension 15 SP5",
                  "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-we:15:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Workstation Extension 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Workstation Extension 15 SP6",
                  "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-we:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.5",
                "product": {
                  "name": "openSUSE Leap 15.5",
                  "product_id": "openSUSE Leap 15.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.6",
                "product": {
                  "name": "openSUSE Leap 15.6",
                  "product_id": "openSUSE Leap 15.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.3.0-150200.8.182.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.3.0-150200.8.182.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x"
        },
        "product_reference": "MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.3.0-150200.8.182.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.3.0-150200.8.182.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x"
        },
        "product_reference": "MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.3.0-150200.8.182.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP5",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP5",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP5",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.3.0-150200.8.182.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.3.0-150200.8.182.1.aarch64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.3.0-150200.8.182.1.s390x as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x"
        },
        "product_reference": "MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.3.0-150200.8.182.1.x86_64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.3.0-150200.8.182.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.3.0-150200.8.182.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x"
        },
        "product_reference": "MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.3.0-150200.8.182.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-8900",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-8900"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker could write data to the user\u0027s clipboard, bypassing the user prompt, during a certain sequence of navigational events. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 128.3, and Thunderbird \u003c 128.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-8900",
          "url": "https://www.suse.com/security/cve/CVE-2024-8900"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1228648 for CVE-2024-8900",
          "url": "https://bugzilla.suse.com/1228648"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-15T06:57:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-8900"
    },
    {
      "cve": "CVE-2024-9392",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-9392"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Firefox ESR \u003c 115.16, Thunderbird \u003c 128.3, and Thunderbird \u003c 131.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-9392",
          "url": "https://www.suse.com/security/cve/CVE-2024-9392"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230979 for CVE-2024-9392",
          "url": "https://bugzilla.suse.com/1230979"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-15T06:57:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-9392"
    },
    {
      "cve": "CVE-2024-9393",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-9393"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin.  This could allow them to access cross-origin PDF content. This access is limited to \"same site\" documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Firefox ESR \u003c 115.16, Thunderbird \u003c 128.3, and Thunderbird \u003c 131.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-9393",
          "url": "https://www.suse.com/security/cve/CVE-2024-9393"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230979 for CVE-2024-9393",
          "url": "https://bugzilla.suse.com/1230979"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-15T06:57:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-9393"
    },
    {
      "cve": "CVE-2024-9394",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-9394"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin.  This could allow them to access cross-origin JSON content. This access is limited to \"same site\" documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Firefox ESR \u003c 115.16, Thunderbird \u003c 128.3, and Thunderbird \u003c 131.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-9394",
          "url": "https://www.suse.com/security/cve/CVE-2024-9394"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230979 for CVE-2024-9394",
          "url": "https://bugzilla.suse.com/1230979"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-15T06:57:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-9394"
    },
    {
      "cve": "CVE-2024-9396",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-9396"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-9396",
          "url": "https://www.suse.com/security/cve/CVE-2024-9396"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230979 for CVE-2024-9396",
          "url": "https://bugzilla.suse.com/1230979"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-15T06:57:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-9396"
    },
    {
      "cve": "CVE-2024-9397",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-9397"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-9397",
          "url": "https://www.suse.com/security/cve/CVE-2024-9397"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230979 for CVE-2024-9397",
          "url": "https://bugzilla.suse.com/1230979"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-15T06:57:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-9397"
    },
    {
      "cve": "CVE-2024-9398",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-9398"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-9398",
          "url": "https://www.suse.com/security/cve/CVE-2024-9398"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230979 for CVE-2024-9398",
          "url": "https://bugzilla.suse.com/1230979"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-15T06:57:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-9398"
    },
    {
      "cve": "CVE-2024-9399",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-9399"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-9399",
          "url": "https://www.suse.com/security/cve/CVE-2024-9399"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230979 for CVE-2024-9399",
          "url": "https://bugzilla.suse.com/1230979"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-15T06:57:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-9399"
    },
    {
      "cve": "CVE-2024-9400",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-9400"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-9400",
          "url": "https://www.suse.com/security/cve/CVE-2024-9400"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230979 for CVE-2024-9400",
          "url": "https://bugzilla.suse.com/1230979"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-15T06:57:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-9400"
    },
    {
      "cve": "CVE-2024-9401",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-9401"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Firefox ESR \u003c 115.16, Thunderbird \u003c 128.3, and Thunderbird \u003c 131.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-9401",
          "url": "https://www.suse.com/security/cve/CVE-2024-9401"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230979 for CVE-2024-9401",
          "url": "https://bugzilla.suse.com/1230979"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-15T06:57:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-9401"
    },
    {
      "cve": "CVE-2024-9402",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-9402"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-9402",
          "url": "https://www.suse.com/security/cve/CVE-2024-9402"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230979 for CVE-2024-9402",
          "url": "https://bugzilla.suse.com/1230979"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-15T06:57:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-9402"
    },
    {
      "cve": "CVE-2024-9680",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-9680"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox \u003c 131.0.2, Firefox ESR \u003c 128.3.1, Firefox ESR \u003c 115.16.1, Thunderbird \u003c 131.0.1, Thunderbird \u003c 128.3.1, and Thunderbird \u003c 115.16.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-9680",
          "url": "https://www.suse.com/security/cve/CVE-2024-9680"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1231413 for CVE-2024-9680",
          "url": "https://bugzilla.suse.com/1231413"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.3.0-150200.8.182.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.3.0-150200.8.182.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-15T06:57:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-9680"
    }
  ]
}

CVE-2024-9396 (GCVE-0-2024-9396)

Vulnerability from cvelistv5

Published

2024-10-01 15:13

Modified

2024-10-01 19:14

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Potential memory corruption may occur when cloning certain objects

Summary

It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1912471
	https://www.mozilla.org/security/advisories/mfsa2024-46/
	https://www.mozilla.org/security/advisories/mfsa2024-47/
	https://www.mozilla.org/security/advisories/mfsa2024-49/
	https://www.mozilla.org/security/advisories/mfsa2024-50/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 131

Mozilla	Firefox ESR	Version: unspecified < 128.3
Mozilla	Thunderbird	Version: unspecified < 128.3
Mozilla	Thunderbird	Version: unspecified < 131

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "131",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "131",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-9396",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-01T19:12:49.374493Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-01T19:14:43.201Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Nils Bars"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
            }
          ],
          "value": "It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Potential memory corruption may occur when cloning certain objects",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-01T15:13:20.007Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1912471"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-9396",
    "datePublished": "2024-10-01T15:13:20.007Z",
    "dateReserved": "2024-10-01T06:10:14.354Z",
    "dateUpdated": "2024-10-01T19:14:43.201Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-9401 (GCVE-0-2024-9401)

Vulnerability from cvelistv5

Published

2024-10-01 15:13

Modified

2024-10-01 18:09

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3

Summary

Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.

References

►

URL

Tags

	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1872744%2C1897792%2C1911317%2C1916476
	https://www.mozilla.org/security/advisories/mfsa2024-46/
	https://www.mozilla.org/security/advisories/mfsa2024-47/
	https://www.mozilla.org/security/advisories/mfsa2024-48/
	https://www.mozilla.org/security/advisories/mfsa2024-49/
	https://www.mozilla.org/security/advisories/mfsa2024-50/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 131

Mozilla	Firefox ESR	Version: unspecified < 128.3
Mozilla	Firefox ESR	Version: unspecified < 115.16
Mozilla	Thunderbird	Version: unspecified < 128.3
Mozilla	Thunderbird	Version: unspecified < 131

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "131",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "115.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "131",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-9401",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-01T18:07:26.971061Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-01T18:09:39.867Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.16",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Andrew Osmond, Sebastian Hengst, Andrew McCreight"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Firefox ESR \u003c 115.16, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
            }
          ],
          "value": "Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Firefox ESR \u003c 115.16, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-01T15:13:21.229Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1872744%2C1897792%2C1911317%2C1916476"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-48/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-9401",
    "datePublished": "2024-10-01T15:13:21.229Z",
    "dateReserved": "2024-10-01T06:10:25.968Z",
    "dateUpdated": "2024-10-01T18:09:39.867Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-9392 (GCVE-0-2024-9392)

Vulnerability from cvelistv5

Published

2024-10-01 15:13

Modified

2024-10-01 18:23

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Compromised content process can bypass site isolation

Summary

A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1899154
	https://bugzilla.mozilla.org/show_bug.cgi?id=1905843
	https://www.mozilla.org/security/advisories/mfsa2024-46/
	https://www.mozilla.org/security/advisories/mfsa2024-47/
	https://www.mozilla.org/security/advisories/mfsa2024-48/
	https://www.mozilla.org/security/advisories/mfsa2024-49/
	https://www.mozilla.org/security/advisories/mfsa2024-50/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 131

Mozilla	Firefox ESR	Version: unspecified < 128.3
Mozilla	Firefox ESR	Version: unspecified < 115.16
Mozilla	Thunderbird	Version: unspecified < 128.3
Mozilla	Thunderbird	Version: unspecified < 131

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "131",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "115.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "131",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-9392",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-01T18:20:31.590631Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-346",
                "description": "CWE-346 Origin Validation Error",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-01T18:23:43.572Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.16",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jan Drescher and David Klein from IAS, TU Braunschweig"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Firefox ESR \u003c 115.16, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
            }
          ],
          "value": "A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Firefox ESR \u003c 115.16, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Compromised content process can bypass site isolation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-01T16:55:36.855Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1899154"
        },
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1905843"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-48/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-9392",
    "datePublished": "2024-10-01T15:13:18.862Z",
    "dateReserved": "2024-10-01T06:10:04.271Z",
    "dateUpdated": "2024-10-01T18:23:43.572Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-9393 (GCVE-0-2024-9393)

Vulnerability from cvelistv5

Published

2024-10-01 15:13

Modified

2025-03-14 15:15

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

Cross-origin access to PDF contents through multipart responses

Summary

An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin. This could allow them to access cross-origin PDF content. This access is limited to "same site" documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1918301
	https://www.mozilla.org/security/advisories/mfsa2024-46/
	https://www.mozilla.org/security/advisories/mfsa2024-47/
	https://www.mozilla.org/security/advisories/mfsa2024-48/
	https://www.mozilla.org/security/advisories/mfsa2024-49/
	https://www.mozilla.org/security/advisories/mfsa2024-50/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 131

Mozilla	Firefox ESR	Version: unspecified < 128.3
Mozilla	Firefox ESR	Version: unspecified < 115.16
Mozilla	Thunderbird	Version: unspecified < 128.3
Mozilla	Thunderbird	Version: unspecified < 131

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-9393",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-14T15:14:36.763792Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-346",
                "description": "CWE-346 Origin Validation Error",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-14T15:15:13.293Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.16",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Masato Kinugawa"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin.  This could allow them to access cross-origin PDF content. This access is limited to \"same site\" documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Firefox ESR \u003c 115.16, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
            }
          ],
          "value": "An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin.  This could allow them to access cross-origin PDF content. This access is limited to \"same site\" documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Firefox ESR \u003c 115.16, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Cross-origin access to PDF contents through multipart responses",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-01T15:13:19.123Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1918301"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-48/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-9393",
    "datePublished": "2024-10-01T15:13:19.123Z",
    "dateReserved": "2024-10-01T06:10:06.764Z",
    "dateUpdated": "2025-03-14T15:15:13.293Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-9680 (GCVE-0-2024-9680)

Vulnerability from cvelistv5

Published

2024-10-09 12:59

Modified

2025-07-30 01:36

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Use-after-free in Animation timeline

Summary

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1923344
	https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49039
	https://www.mozilla.org/security/advisories/mfsa2024-51/
	https://www.mozilla.org/security/advisories/mfsa2024-52/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 131.0.2

Mozilla	Firefox ESR	Version: unspecified < 128.3.1
Mozilla	Firefox ESR	Version: unspecified < 115.16.1
Mozilla	Thunderbird	Version: unspecified < 131.0.1
Mozilla	Thunderbird	Version: unspecified < 128.3.1
Mozilla	Thunderbird	Version: unspecified < 115.16.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "131.0.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.3.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "115.16.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.3.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "115.16.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "131.0.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "128.3.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "115.16.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "131.0.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "128.3.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "115.16.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "131.0.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "128.3.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "115.16.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-9680",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-16T12:58:45.687179Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2024-10-15",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9680"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-30T01:36:31.223Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "timeline": [
          {
            "lang": "en",
            "time": "2024-10-15T00:00:00+00:00",
            "value": "CVE-2024-9680 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-10-10T22:02:36.350Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=281992"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00005.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131.0.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.16.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131.0.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.16.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Damien Schaeffer from ESET"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox \u003c 131.0.2, Firefox ESR \u003c 128.3.1, Firefox ESR \u003c 115.16.1, Thunderbird \u003c 131.0.1, Thunderbird \u003c 128.3.1, and Thunderbird \u003c 115.16.0."
            }
          ],
          "value": "An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox \u003c 131.0.2, Firefox ESR \u003c 128.3.1, Firefox ESR \u003c 115.16.1, Thunderbird \u003c 131.0.1, Thunderbird \u003c 128.3.1, and Thunderbird \u003c 115.16.0."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in Animation timeline",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-18T18:21:58.377Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1923344"
        },
        {
          "name": "Windows sandbox escape detected with the in-the-wild exploit",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49039"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-51/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-52/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-9680",
    "datePublished": "2024-10-09T12:59:07.108Z",
    "dateReserved": "2024-10-09T06:28:21.295Z",
    "dateUpdated": "2025-07-30T01:36:31.223Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-9398 (GCVE-0-2024-9398)

Vulnerability from cvelistv5

Published

2024-10-01 15:13

Modified

2025-03-18 19:36

Severity ?

5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

External protocol handlers could be enumerated via popups

Summary

By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1881037
	https://www.mozilla.org/security/advisories/mfsa2024-46/
	https://www.mozilla.org/security/advisories/mfsa2024-47/
	https://www.mozilla.org/security/advisories/mfsa2024-49/
	https://www.mozilla.org/security/advisories/mfsa2024-50/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 131

Mozilla	Firefox ESR	Version: unspecified < 128.3
Mozilla	Thunderbird	Version: unspecified < 128.3
Mozilla	Thunderbird	Version: unspecified < 131

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-9398",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-18T19:35:52.431499Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-203",
                "description": "CWE-203 Observable Discrepancy",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-18T19:36:14.028Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Satoki Tsuji"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
            }
          ],
          "value": "By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "External protocol handlers could be enumerated via popups",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-01T15:13:20.488Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1881037"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-9398",
    "datePublished": "2024-10-01T15:13:20.488Z",
    "dateReserved": "2024-10-01T06:10:19.182Z",
    "dateUpdated": "2025-03-18T19:36:14.028Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-9402 (GCVE-0-2024-9402)

Vulnerability from cvelistv5

Published

2024-10-01 15:13

Modified

2024-10-01 18:37

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3

Summary

Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

References

►

URL

Tags

	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1872744%2C1897792%2C1911317%2C1913445%2C1914106%2C1914475%2C1914963%2C1915008%2C1916476
	https://www.mozilla.org/security/advisories/mfsa2024-46/
	https://www.mozilla.org/security/advisories/mfsa2024-47/
	https://www.mozilla.org/security/advisories/mfsa2024-49/
	https://www.mozilla.org/security/advisories/mfsa2024-50/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 131

Mozilla	Firefox ESR	Version: unspecified < 128.3
Mozilla	Thunderbird	Version: unspecified < 128.3
Mozilla	Thunderbird	Version: unspecified < 131

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "131",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "131",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-9402",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-01T18:36:13.133836Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-01T18:37:41.130Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Andrew Osmond, Sebastian Hengst, Andrew McCreight, Yury Delendik, the Mozilla Fuzzing Team,"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
            }
          ],
          "value": "Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-01T15:13:21.493Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1872744%2C1897792%2C1911317%2C1913445%2C1914106%2C1914475%2C1914963%2C1915008%2C1916476"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-9402",
    "datePublished": "2024-10-01T15:13:21.493Z",
    "dateReserved": "2024-10-01T06:10:26.410Z",
    "dateUpdated": "2024-10-01T18:37:41.130Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-9400 (GCVE-0-2024-9400)

Vulnerability from cvelistv5

Published

2024-10-01 15:13

Modified

2024-10-01 18:43

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Potential memory corruption during JIT compilation

Summary

A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1915249
	https://www.mozilla.org/security/advisories/mfsa2024-46/
	https://www.mozilla.org/security/advisories/mfsa2024-47/
	https://www.mozilla.org/security/advisories/mfsa2024-49/
	https://www.mozilla.org/security/advisories/mfsa2024-50/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 131

Mozilla	Firefox ESR	Version: unspecified < 128.3
Mozilla	Thunderbird	Version: unspecified < 128.3
Mozilla	Thunderbird	Version: unspecified < 131

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "131",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "131",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-9400",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-01T18:42:31.342013Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-01T18:43:38.722Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Gary Kwong"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
            }
          ],
          "value": "A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Potential memory corruption during JIT compilation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-01T15:13:20.979Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1915249"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-9400",
    "datePublished": "2024-10-01T15:13:20.979Z",
    "dateReserved": "2024-10-01T06:10:23.667Z",
    "dateUpdated": "2024-10-01T18:43:38.722Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-8900 (GCVE-0-2024-8900)

Vulnerability from cvelistv5

Published

2024-09-17 18:14

Modified

2025-03-18 20:17

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE

Clipboard write permission bypass

Summary

An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of navigational events. This vulnerability affects Firefox < 129, Firefox ESR < 128.3, and Thunderbird < 128.3.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1872841
	https://www.mozilla.org/security/advisories/mfsa2024-33/
	https://www.mozilla.org/security/advisories/mfsa2024-47/
	https://www.mozilla.org/security/advisories/mfsa2024-49/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 129

	Mozilla	Firefox ESR	Version: unspecified < 128.3
	Mozilla	Thunderbird	Version: unspecified < 128.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-8900",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-18T20:14:27.515172Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-732",
                "description": "CWE-732 Incorrect Permission Assignment for Critical Resource",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-18T20:17:43.168Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "129",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Om Apip"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An attacker could write data to the user\u0027s clipboard, bypassing the user prompt, during a certain sequence of navigational events. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 128.3, and Thunderbird \u003c 128.3."
            }
          ],
          "value": "An attacker could write data to the user\u0027s clipboard, bypassing the user prompt, during a certain sequence of navigational events. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 128.3, and Thunderbird \u003c 128.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Clipboard write permission bypass",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-01T15:13:19.753Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1872841"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-8900",
    "datePublished": "2024-09-17T18:14:52.537Z",
    "dateReserved": "2024-09-16T18:25:53.969Z",
    "dateUpdated": "2025-03-18T20:17:43.168Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-9399 (GCVE-0-2024-9399)

Vulnerability from cvelistv5

Published

2024-10-01 15:13

Modified

2025-03-14 15:39

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

Specially crafted WebTransport requests could lead to denial of service

Summary

A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1907726
	https://www.mozilla.org/security/advisories/mfsa2024-46/
	https://www.mozilla.org/security/advisories/mfsa2024-47/
	https://www.mozilla.org/security/advisories/mfsa2024-49/
	https://www.mozilla.org/security/advisories/mfsa2024-50/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 131

Mozilla	Firefox ESR	Version: unspecified < 128.3
Mozilla	Thunderbird	Version: unspecified < 128.3
Mozilla	Thunderbird	Version: unspecified < 131

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-9399",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-14T15:39:09.367406Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-404",
                "description": "CWE-404 Improper Resource Shutdown or Release",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-14T15:39:43.465Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Marten Richter"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
            }
          ],
          "value": "A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Specially crafted WebTransport requests could lead to denial of service",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-01T15:13:20.769Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1907726"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-9399",
    "datePublished": "2024-10-01T15:13:20.769Z",
    "dateReserved": "2024-10-01T06:10:21.385Z",
    "dateUpdated": "2025-03-14T15:39:43.465Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-9397 (GCVE-0-2024-9397)

Vulnerability from cvelistv5

Published

2024-10-01 15:13

Modified

2025-03-18 16:03

Severity ?

6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

Potential directory upload bypass via clickjacking

Summary

A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1916659
	https://www.mozilla.org/security/advisories/mfsa2024-46/
	https://www.mozilla.org/security/advisories/mfsa2024-47/
	https://www.mozilla.org/security/advisories/mfsa2024-49/
	https://www.mozilla.org/security/advisories/mfsa2024-50/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 131

Mozilla	Firefox ESR	Version: unspecified < 128.3
Mozilla	Thunderbird	Version: unspecified < 128.3
Mozilla	Thunderbird	Version: unspecified < 131

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-9397",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-01T18:55:57.914603Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1021",
                "description": "CWE-1021 Improper Restriction of Rendered UI Layers or Frames",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-18T16:03:28.155Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Shaheen Fazim"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
            }
          ],
          "value": "A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Potential directory upload bypass via clickjacking",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-01T15:13:20.274Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1916659"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-9397",
    "datePublished": "2024-10-01T15:13:20.274Z",
    "dateReserved": "2024-10-01T06:10:16.853Z",
    "dateUpdated": "2025-03-18T16:03:28.155Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-9394 (GCVE-0-2024-9394)

Vulnerability from cvelistv5

Published

2024-10-01 15:13

Modified

2025-03-14 15:53

Severity ?

6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

Cross-origin access to JSON contents through multipart responses

Summary

An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin. This could allow them to access cross-origin JSON content. This access is limited to "same site" documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1918874
	https://www.mozilla.org/security/advisories/mfsa2024-46/
	https://www.mozilla.org/security/advisories/mfsa2024-47/
	https://www.mozilla.org/security/advisories/mfsa2024-48/
	https://www.mozilla.org/security/advisories/mfsa2024-49/
	https://www.mozilla.org/security/advisories/mfsa2024-50/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 131

Mozilla	Firefox ESR	Version: unspecified < 128.3
Mozilla	Firefox ESR	Version: unspecified < 115.16
Mozilla	Thunderbird	Version: unspecified < 128.3
Mozilla	Thunderbird	Version: unspecified < 131

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-9394",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-01T18:04:59.636685Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-79",
                "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-14T15:53:44.632Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.16",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "131",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Masato Kinugawa"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin.  This could allow them to access cross-origin JSON content. This access is limited to \"same site\" documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Firefox ESR \u003c 115.16, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
            }
          ],
          "value": "An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin.  This could allow them to access cross-origin JSON content. This access is limited to \"same site\" documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox \u003c 131, Firefox ESR \u003c 128.3, Firefox ESR \u003c 115.16, Thunderbird \u003c 128.3, and Thunderbird \u003c 131."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Cross-origin access to JSON contents through multipart responses",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-01T15:13:19.407Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1918874"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-48/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-9394",
    "datePublished": "2024-10-01T15:13:19.407Z",
    "dateReserved": "2024-10-01T06:10:09.702Z",
    "dateUpdated": "2025-03-14T15:53:44.632Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2024:3629-1

Vulnerability from csaf_suse

CVE-2024-9396 (GCVE-0-2024-9396)

Vulnerability from cvelistv5

CVE-2024-9401 (GCVE-0-2024-9401)

Vulnerability from cvelistv5

CVE-2024-9392 (GCVE-0-2024-9392)

Vulnerability from cvelistv5

CVE-2024-9393 (GCVE-0-2024-9393)

Vulnerability from cvelistv5

CVE-2024-9680 (GCVE-0-2024-9680)

Vulnerability from cvelistv5

CVE-2024-9398 (GCVE-0-2024-9398)

Vulnerability from cvelistv5

CVE-2024-9402 (GCVE-0-2024-9402)

Vulnerability from cvelistv5

CVE-2024-9400 (GCVE-0-2024-9400)

Vulnerability from cvelistv5

CVE-2024-8900 (GCVE-0-2024-8900)

Vulnerability from cvelistv5

CVE-2024-9399 (GCVE-0-2024-9399)

Vulnerability from cvelistv5

CVE-2024-9397 (GCVE-0-2024-9397)

Vulnerability from cvelistv5

CVE-2024-9394 (GCVE-0-2024-9394)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature