Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-25738 (GCVE-0-2023-25738)
Vulnerability from cvelistv5 – Published: 2023-06-02 00:00 – Updated: 2025-01-09 20:08- Printing on Windows could potentially crash Firefox with some device drivers
| Vendor | Product | Version | |
|---|---|---|---|
| Mozilla | Firefox |
Affected:
unspecified , < 110
(custom)
|
|
| Mozilla | Thunderbird |
Affected:
unspecified , < 102.8
(custom)
|
|
| Mozilla | Firefox ESR |
Affected:
unspecified , < 102.8
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T11:32:12.402Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2023-06/"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2023-05/"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2023-07/"
},
{
"tags": [
"x_transferred"
],
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811852"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-25738",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-09T20:08:20.359595Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-01-09T20:08:25.085Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811852"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Firefox",
"vendor": "Mozilla",
"versions": [
{
"lessThan": "110",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "Thunderbird",
"vendor": "Mozilla",
"versions": [
{
"lessThan": "102.8",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "Firefox ESR",
"vendor": "Mozilla",
"versions": [
{
"lessThan": "102.8",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Members of the \u003ccode\u003eDEVMODEW\u003c/code\u003e struct set by the printer device driver weren\u0027t being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.\u003cbr\u003e*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Printing on Windows could potentially crash Firefox with some device drivers",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-06-02T00:00:00.000Z",
"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
"shortName": "mozilla"
},
"references": [
{
"url": "https://www.mozilla.org/security/advisories/mfsa2023-06/"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2023-05/"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2023-07/"
},
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811852"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
"assignerShortName": "mozilla",
"cveId": "CVE-2023-25738",
"datePublished": "2023-06-02T00:00:00.000Z",
"dateReserved": "2023-02-13T00:00:00.000Z",
"dateUpdated": "2025-01-09T20:08:25.085Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2023-25738",
"date": "2026-05-22",
"epss": "0.00163",
"percentile": "0.36803"
},
"fkie_nvd": {
"configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"110.0\", \"matchCriteriaId\": \"811EBB2F-0FAA-49DB-8B16-99341814C3D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"102.8\", \"matchCriteriaId\": \"731649BC-CBBC-4423-93E1-577EF7A17DBD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"102.8\", \"matchCriteriaId\": \"E7ED1B02-7653-4441-B4F4-980A86C4F170\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Members of the \u003ccode\u003eDEVMODEW\u003c/code\u003e struct set by the printer device driver weren\u0027t being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.\u003cbr\u003e*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.\"}]",
"id": "CVE-2023-25738",
"lastModified": "2025-01-09T20:15:30.277",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 3.6}, {\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 3.6}]}",
"published": "2023-06-02T17:15:11.367",
"references": "[{\"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=1811852\", \"source\": \"security@mozilla.org\", \"tags\": [\"Issue Tracking\", \"Permissions Required\"]}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-05/\", \"source\": \"security@mozilla.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-06/\", \"source\": \"security@mozilla.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-07/\", \"source\": \"security@mozilla.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=1811852\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Permissions Required\"]}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-05/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-06/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-07/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=1811852\", \"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"tags\": [\"Issue Tracking\", \"Permissions Required\"]}]",
"sourceIdentifier": "security@mozilla.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-125\"}]}, {\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-125\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2023-25738\",\"sourceIdentifier\":\"security@mozilla.org\",\"published\":\"2023-06-02T17:15:11.367\",\"lastModified\":\"2025-01-09T20:15:30.277\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Members of the \u003ccode\u003eDEVMODEW\u003c/code\u003e struct set by the printer device driver weren\u0027t being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.\u003cbr\u003e*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"110.0\",\"matchCriteriaId\":\"811EBB2F-0FAA-49DB-8B16-99341814C3D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"102.8\",\"matchCriteriaId\":\"731649BC-CBBC-4423-93E1-577EF7A17DBD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"102.8\",\"matchCriteriaId\":\"E7ED1B02-7653-4441-B4F4-980A86C4F170\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]}],\"references\":[{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=1811852\",\"source\":\"security@mozilla.org\",\"tags\":[\"Issue Tracking\",\"Permissions Required\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2023-05/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2023-06/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2023-07/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=1811852\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Permissions Required\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2023-05/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2023-06/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2023-07/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=1811852\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Issue Tracking\",\"Permissions Required\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-06/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-05/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-07/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=1811852\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T11:32:12.402Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 6.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-25738\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-01-09T20:08:20.359595Z\"}}}], \"references\": [{\"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=1811852\", \"tags\": [\"exploit\"]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-125\", \"description\": \"CWE-125 Out-of-bounds Read\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-01-09T20:07:49.284Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Mozilla\", \"product\": \"Firefox\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"110\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Mozilla\", \"product\": \"Thunderbird\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"102.8\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Mozilla\", \"product\": \"Firefox ESR\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"102.8\", \"versionType\": \"custom\"}]}], \"references\": [{\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-06/\"}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-05/\"}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-07/\"}, {\"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=1811852\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Members of the \u003ccode\u003eDEVMODEW\u003c/code\u003e struct set by the printer device driver weren\u0027t being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.\u003cbr\u003e*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"Printing on Windows could potentially crash Firefox with some device drivers\"}]}], \"providerMetadata\": {\"orgId\": \"f16b083a-5664-49f3-a51e-8d479e5ed7fe\", \"shortName\": \"mozilla\", \"dateUpdated\": \"2023-06-02T00:00:00.000Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2023-25738\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-01-09T20:08:25.085Z\", \"dateReserved\": \"2023-02-13T00:00:00.000Z\", \"assignerOrgId\": \"f16b083a-5664-49f3-a51e-8d479e5ed7fe\", \"datePublished\": \"2023-06-02T00:00:00.000Z\", \"assignerShortName\": \"mozilla\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
CERTFR-2023-AVI-0124
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Mozilla Firefox. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une exécution de code arbitraire à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox versions ant\u00e9rieures \u00e0 110",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 102.8",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-25730",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25730"
},
{
"name": "CVE-2023-25728",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25728"
},
{
"name": "CVE-2023-25735",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25735"
},
{
"name": "CVE-2023-25739",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25739"
},
{
"name": "CVE-2023-25729",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25729"
},
{
"name": "CVE-2023-25731",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25731"
},
{
"name": "CVE-2023-25744",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25744"
},
{
"name": "CVE-2023-25732",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25732"
},
{
"name": "CVE-2023-25740",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25740"
},
{
"name": "CVE-2023-0767",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0767"
},
{
"name": "CVE-2023-25733",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25733"
},
{
"name": "CVE-2023-25742",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25742"
},
{
"name": "CVE-2023-25737",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25737"
},
{
"name": "CVE-2023-25734",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25734"
},
{
"name": "CVE-2023-25745",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25745"
},
{
"name": "CVE-2023-25736",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25736"
},
{
"name": "CVE-2023-25741",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25741"
},
{
"name": "CVE-2023-25746",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25746"
},
{
"name": "CVE-2023-25738",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25738"
},
{
"name": "CVE-2023-25743",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25743"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla du 14 f\u00e9vrier 2023",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla du 14 f\u00e9vrier 2023",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-05/"
}
],
"reference": "CERTFR-2023-AVI-0124",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-02-15T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans\u003cspan\nclass=\"textit\"\u003e\u00a0Mozilla\u00a0Firefox\u003c/span\u003e. Elles permettent \u00e0 un attaquant\nde provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, une\nex\u00e9cution de code arbitraire \u00e0 distance et un contournement de la\npolitique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Mozilla Firefox",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2023-05 du 14 f\u00e9vrier 2023",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2023-06 du 14 f\u00e9vrier 2023",
"url": null
}
]
}
CERTFR-2023-AVI-0139
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Mozilla Thunderbird. Elles permettent à un attaquant de provoquer une atteinte à l'intégrité des données, une exécution de code arbitraire à distance, un contournement de la politique de sécurité et un déni de service à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Thunderbird | Mozilla Thunderbird versions antérieures à 102.8 |
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Mozilla Thunderbird versions ant\u00e9rieures \u00e0 102.8",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-25730",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25730"
},
{
"name": "CVE-2023-25728",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25728"
},
{
"name": "CVE-2023-25735",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25735"
},
{
"name": "CVE-2023-0616",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0616"
},
{
"name": "CVE-2023-25739",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25739"
},
{
"name": "CVE-2023-25729",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25729"
},
{
"name": "CVE-2023-25732",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25732"
},
{
"name": "CVE-2023-0767",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0767"
},
{
"name": "CVE-2023-25742",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25742"
},
{
"name": "CVE-2023-25737",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25737"
},
{
"name": "CVE-2023-25734",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25734"
},
{
"name": "CVE-2023-25746",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25746"
},
{
"name": "CVE-2023-25738",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25738"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla du 15 f\u00e9vrier 2023",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/"
}
],
"reference": "CERTFR-2023-AVI-0139",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-02-16T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMozilla Thunderbird\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es, une\nex\u00e9cution de code arbitraire \u00e0 distance, un contournement de la\npolitique de s\u00e9curit\u00e9 et un d\u00e9ni de service \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Thunderbird",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2023-07 du 15 f\u00e9vrier 2023",
"url": null
}
]
}
CERTFR-2023-AVI-0124
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Mozilla Firefox. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une exécution de code arbitraire à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox versions ant\u00e9rieures \u00e0 110",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 102.8",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-25730",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25730"
},
{
"name": "CVE-2023-25728",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25728"
},
{
"name": "CVE-2023-25735",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25735"
},
{
"name": "CVE-2023-25739",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25739"
},
{
"name": "CVE-2023-25729",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25729"
},
{
"name": "CVE-2023-25731",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25731"
},
{
"name": "CVE-2023-25744",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25744"
},
{
"name": "CVE-2023-25732",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25732"
},
{
"name": "CVE-2023-25740",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25740"
},
{
"name": "CVE-2023-0767",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0767"
},
{
"name": "CVE-2023-25733",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25733"
},
{
"name": "CVE-2023-25742",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25742"
},
{
"name": "CVE-2023-25737",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25737"
},
{
"name": "CVE-2023-25734",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25734"
},
{
"name": "CVE-2023-25745",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25745"
},
{
"name": "CVE-2023-25736",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25736"
},
{
"name": "CVE-2023-25741",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25741"
},
{
"name": "CVE-2023-25746",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25746"
},
{
"name": "CVE-2023-25738",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25738"
},
{
"name": "CVE-2023-25743",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25743"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla du 14 f\u00e9vrier 2023",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla du 14 f\u00e9vrier 2023",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-05/"
}
],
"reference": "CERTFR-2023-AVI-0124",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-02-15T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans\u003cspan\nclass=\"textit\"\u003e\u00a0Mozilla\u00a0Firefox\u003c/span\u003e. Elles permettent \u00e0 un attaquant\nde provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, une\nex\u00e9cution de code arbitraire \u00e0 distance et un contournement de la\npolitique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Mozilla Firefox",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2023-05 du 14 f\u00e9vrier 2023",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2023-06 du 14 f\u00e9vrier 2023",
"url": null
}
]
}
CERTFR-2023-AVI-0139
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Mozilla Thunderbird. Elles permettent à un attaquant de provoquer une atteinte à l'intégrité des données, une exécution de code arbitraire à distance, un contournement de la politique de sécurité et un déni de service à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Thunderbird | Mozilla Thunderbird versions antérieures à 102.8 |
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Mozilla Thunderbird versions ant\u00e9rieures \u00e0 102.8",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-25730",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25730"
},
{
"name": "CVE-2023-25728",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25728"
},
{
"name": "CVE-2023-25735",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25735"
},
{
"name": "CVE-2023-0616",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0616"
},
{
"name": "CVE-2023-25739",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25739"
},
{
"name": "CVE-2023-25729",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25729"
},
{
"name": "CVE-2023-25732",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25732"
},
{
"name": "CVE-2023-0767",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0767"
},
{
"name": "CVE-2023-25742",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25742"
},
{
"name": "CVE-2023-25737",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25737"
},
{
"name": "CVE-2023-25734",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25734"
},
{
"name": "CVE-2023-25746",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25746"
},
{
"name": "CVE-2023-25738",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25738"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla du 15 f\u00e9vrier 2023",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/"
}
],
"reference": "CERTFR-2023-AVI-0139",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-02-16T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMozilla Thunderbird\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es, une\nex\u00e9cution de code arbitraire \u00e0 distance, un contournement de la\npolitique de s\u00e9curit\u00e9 et un d\u00e9ni de service \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Thunderbird",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2023-07 du 15 f\u00e9vrier 2023",
"url": null
}
]
}
CNVD-2023-52697
Vulnerability from cnvd - Published: 2023-06-26厂商已发布了漏洞修复程序,请及时关注更新: https://www.mozilla.org/en-US/security/advisories/mfsa2023-05/
| Name | ['Mozilla Firefox <110.0', 'Mozilla Firefox ESR <102.8', 'Mozilla Thunderbird <102.8'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2023-25738",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2023-25738"
}
},
"description": "Mozilla Firefox\u662f\u7f8e\u56fdMozilla\u57fa\u91d1\u4f1a\u7684\u4e00\u6b3e\u5f00\u6e90Web\u6d4f\u89c8\u5668\u3002\n\nMozilla Firefox\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u6253\u5370\u673a\u8bbe\u5907\u9a71\u52a8\u7a0b\u5e8f\u8bbe\u7f6e\u7684DEVMODEW\u7ed3\u6784\u7684\u6210\u5458\u672a\u80fd\u5f97\u5230\u9a8c\u8bc1\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u6d4f\u89c8\u5668\u5c1d\u8bd5\u8d8a\u754c\u8bbf\u95ee\u76f8\u5173\u53d8\u91cf\u3002",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.mozilla.org/en-US/security/advisories/mfsa2023-05/",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2023-52697",
"openTime": "2023-06-26",
"patchDescription": "Mozilla Firefox\u662f\u7f8e\u56fdMozilla\u57fa\u91d1\u4f1a\u7684\u4e00\u6b3e\u5f00\u6e90Web\u6d4f\u89c8\u5668\u3002\r\n\r\nMozilla Firefox\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u6253\u5370\u673a\u8bbe\u5907\u9a71\u52a8\u7a0b\u5e8f\u8bbe\u7f6e\u7684DEVMODEW\u7ed3\u6784\u7684\u6210\u5458\u672a\u80fd\u5f97\u5230\u9a8c\u8bc1\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u6d4f\u89c8\u5668\u5c1d\u8bd5\u8d8a\u754c\u8bbf\u95ee\u76f8\u5173\u53d8\u91cf\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Mozilla Firefox\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff08CNVD-2023-52697\uff09\u7684\u8865\u4e01",
"products": {
"product": [
"Mozilla Firefox \u003c110.0",
"Mozilla Firefox ESR \u003c102.8",
"Mozilla Thunderbird \u003c102.8"
]
},
"referenceLink": "https://www.mozilla.org/security/advisories/mfsa2023-05/",
"serverity": "\u9ad8",
"submitTime": "2023-06-07",
"title": "Mozilla Firefox\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff08CNVD-2023-52697\uff09"
}
FKIE_CVE-2023-25738
Vulnerability from fkie_nvd - Published: 2023-06-02 17:15 - Updated: 2025-01-09 20:156.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
| URL | Tags | ||
|---|---|---|---|
| security@mozilla.org | https://bugzilla.mozilla.org/show_bug.cgi?id=1811852 | Issue Tracking, Permissions Required | |
| security@mozilla.org | https://www.mozilla.org/security/advisories/mfsa2023-05/ | Vendor Advisory | |
| security@mozilla.org | https://www.mozilla.org/security/advisories/mfsa2023-06/ | Vendor Advisory | |
| security@mozilla.org | https://www.mozilla.org/security/advisories/mfsa2023-07/ | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://bugzilla.mozilla.org/show_bug.cgi?id=1811852 | Issue Tracking, Permissions Required | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.mozilla.org/security/advisories/mfsa2023-05/ | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.mozilla.org/security/advisories/mfsa2023-06/ | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.mozilla.org/security/advisories/mfsa2023-07/ | Vendor Advisory | |
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | https://bugzilla.mozilla.org/show_bug.cgi?id=1811852 | Issue Tracking, Permissions Required |
| Vendor | Product | Version | |
|---|---|---|---|
| mozilla | firefox | * | |
| mozilla | firefox_esr | * | |
| mozilla | thunderbird | * | |
| microsoft | windows | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
"matchCriteriaId": "811EBB2F-0FAA-49DB-8B16-99341814C3D1",
"versionEndExcluding": "110.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
"matchCriteriaId": "731649BC-CBBC-4423-93E1-577EF7A17DBD",
"versionEndExcluding": "102.8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E7ED1B02-7653-4441-B4F4-980A86C4F170",
"versionEndExcluding": "102.8",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Members of the \u003ccode\u003eDEVMODEW\u003c/code\u003e struct set by the printer device driver weren\u0027t being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.\u003cbr\u003e*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8."
}
],
"id": "CVE-2023-25738",
"lastModified": "2025-01-09T20:15:30.277",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
},
"published": "2023-06-02T17:15:11.367",
"references": [
{
"source": "security@mozilla.org",
"tags": [
"Issue Tracking",
"Permissions Required"
],
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811852"
},
{
"source": "security@mozilla.org",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2023-05/"
},
{
"source": "security@mozilla.org",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2023-06/"
},
{
"source": "security@mozilla.org",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2023-07/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking",
"Permissions Required"
],
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811852"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2023-05/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2023-06/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2023-07/"
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Issue Tracking",
"Permissions Required"
],
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811852"
}
],
"sourceIdentifier": "security@mozilla.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-125"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-125"
}
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
}
GHSA-5WXJ-V52J-4FMH
Vulnerability from github – Published: 2023-06-02 18:30 – Updated: 2024-04-04 04:30Members of the DEVMODEW struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.
This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
{
"affected": [],
"aliases": [
"CVE-2023-25738"
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-06-02T17:15:11Z",
"severity": "MODERATE"
},
"details": "Members of the \u003ccode\u003eDEVMODEW\u003c/code\u003e struct set by the printer device driver weren\u0027t being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.\u003cbr\u003e*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"id": "GHSA-5wxj-v52j-4fmh",
"modified": "2024-04-04T04:30:03Z",
"published": "2023-06-02T18:30:18Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25738"
},
{
"type": "WEB",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811852"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2023-05"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2023-06"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2023-07"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2023-25738
Vulnerability from gsd - Updated: 2023-12-13 01:20{
"GSD": {
"alias": "CVE-2023-25738",
"id": "GSD-2023-25738",
"references": [
"https://www.suse.com/security/cve/CVE-2023-25738.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2023-25738"
],
"details": "Members of the \u003ccode\u003eDEVMODEW\u003c/code\u003e struct set by the printer device driver weren\u0027t being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.\u003cbr\u003e*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"id": "GSD-2023-25738",
"modified": "2023-12-13T01:20:40.440019Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "security@mozilla.org",
"ID": "CVE-2023-25738",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Firefox",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "110"
}
]
}
},
{
"product_name": "Thunderbird",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "102.8"
}
]
}
},
{
"product_name": "Firefox ESR",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "102.8"
}
]
}
}
]
},
"vendor_name": "Mozilla"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Members of the \u003ccode\u003eDEVMODEW\u003c/code\u003e struct set by the printer device driver weren\u0027t being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.\u003cbr\u003e*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Printing on Windows could potentially crash Firefox with some device drivers"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.mozilla.org/security/advisories/mfsa2023-06/",
"refsource": "MISC",
"url": "https://www.mozilla.org/security/advisories/mfsa2023-06/"
},
{
"name": "https://www.mozilla.org/security/advisories/mfsa2023-05/",
"refsource": "MISC",
"url": "https://www.mozilla.org/security/advisories/mfsa2023-05/"
},
{
"name": "https://www.mozilla.org/security/advisories/mfsa2023-07/",
"refsource": "MISC",
"url": "https://www.mozilla.org/security/advisories/mfsa2023-07/"
},
{
"name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811852",
"refsource": "MISC",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811852"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "110.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "102.8",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "102.8",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "security@mozilla.org",
"ID": "CVE-2023-25738"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Members of the \u003ccode\u003eDEVMODEW\u003c/code\u003e struct set by the printer device driver weren\u0027t being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.\u003cbr\u003e*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.mozilla.org/security/advisories/mfsa2023-05/",
"refsource": "MISC",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2023-05/"
},
{
"name": "https://www.mozilla.org/security/advisories/mfsa2023-07/",
"refsource": "MISC",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2023-07/"
},
{
"name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811852",
"refsource": "MISC",
"tags": [
"Issue Tracking",
"Permissions Required"
],
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811852"
},
{
"name": "https://www.mozilla.org/security/advisories/mfsa2023-06/",
"refsource": "MISC",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2023-06/"
}
]
}
},
"impact": {
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
},
"lastModifiedDate": "2023-06-08T16:10Z",
"publishedDate": "2023-06-02T17:15Z"
}
}
}
OPENSUSE-SU-2024:12702-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "libmozjs-102-0-102.8.0-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the libmozjs-102-0-102.8.0-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-12702",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_12702-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0767 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25728 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25728/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25729 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25729/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25730 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25730/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25732 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25732/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25734 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25734/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25735 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25735/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25737 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25737/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25738 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25738/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25739 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25739/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25742 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25742/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25743 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25743/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25744 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25744/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25746 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25746/"
}
],
"title": "libmozjs-102-0-102.8.0-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:12702-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libmozjs-102-0-102.8.0-1.1.aarch64",
"product": {
"name": "libmozjs-102-0-102.8.0-1.1.aarch64",
"product_id": "libmozjs-102-0-102.8.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "mozjs102-102.8.0-1.1.aarch64",
"product": {
"name": "mozjs102-102.8.0-1.1.aarch64",
"product_id": "mozjs102-102.8.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "mozjs102-devel-102.8.0-1.1.aarch64",
"product": {
"name": "mozjs102-devel-102.8.0-1.1.aarch64",
"product_id": "mozjs102-devel-102.8.0-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libmozjs-102-0-102.8.0-1.1.ppc64le",
"product": {
"name": "libmozjs-102-0-102.8.0-1.1.ppc64le",
"product_id": "libmozjs-102-0-102.8.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "mozjs102-102.8.0-1.1.ppc64le",
"product": {
"name": "mozjs102-102.8.0-1.1.ppc64le",
"product_id": "mozjs102-102.8.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "mozjs102-devel-102.8.0-1.1.ppc64le",
"product": {
"name": "mozjs102-devel-102.8.0-1.1.ppc64le",
"product_id": "mozjs102-devel-102.8.0-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libmozjs-102-0-102.8.0-1.1.s390x",
"product": {
"name": "libmozjs-102-0-102.8.0-1.1.s390x",
"product_id": "libmozjs-102-0-102.8.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "mozjs102-102.8.0-1.1.s390x",
"product": {
"name": "mozjs102-102.8.0-1.1.s390x",
"product_id": "mozjs102-102.8.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "mozjs102-devel-102.8.0-1.1.s390x",
"product": {
"name": "mozjs102-devel-102.8.0-1.1.s390x",
"product_id": "mozjs102-devel-102.8.0-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libmozjs-102-0-102.8.0-1.1.x86_64",
"product": {
"name": "libmozjs-102-0-102.8.0-1.1.x86_64",
"product_id": "libmozjs-102-0-102.8.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "mozjs102-102.8.0-1.1.x86_64",
"product": {
"name": "mozjs102-102.8.0-1.1.x86_64",
"product_id": "mozjs102-102.8.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "mozjs102-devel-102.8.0-1.1.x86_64",
"product": {
"name": "mozjs102-devel-102.8.0-1.1.x86_64",
"product_id": "mozjs102-devel-102.8.0-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libmozjs-102-0-102.8.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64"
},
"product_reference": "libmozjs-102-0-102.8.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmozjs-102-0-102.8.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le"
},
"product_reference": "libmozjs-102-0-102.8.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmozjs-102-0-102.8.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x"
},
"product_reference": "libmozjs-102-0-102.8.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmozjs-102-0-102.8.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64"
},
"product_reference": "libmozjs-102-0-102.8.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozjs102-102.8.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64"
},
"product_reference": "mozjs102-102.8.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozjs102-102.8.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le"
},
"product_reference": "mozjs102-102.8.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozjs102-102.8.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x"
},
"product_reference": "mozjs102-102.8.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozjs102-102.8.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64"
},
"product_reference": "mozjs102-102.8.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozjs102-devel-102.8.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64"
},
"product_reference": "mozjs102-devel-102.8.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozjs102-devel-102.8.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le"
},
"product_reference": "mozjs102-devel-102.8.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozjs102-devel-102.8.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x"
},
"product_reference": "mozjs102-devel-102.8.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozjs102-devel-102.8.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
},
"product_reference": "mozjs102-devel-102.8.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-0767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0767"
}
],
"notes": [
{
"category": "general",
"text": "An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0767",
"url": "https://www.suse.com/security/cve/CVE-2023-0767"
},
{
"category": "external",
"summary": "SUSE Bug 1208138 for CVE-2023-0767",
"url": "https://bugzilla.suse.com/1208138"
},
{
"category": "external",
"summary": "SUSE Bug 1213200 for CVE-2023-0767",
"url": "https://bugzilla.suse.com/1213200"
},
{
"category": "external",
"summary": "SUSE Bug 1213818 for CVE-2023-0767",
"url": "https://bugzilla.suse.com/1213818"
},
{
"category": "external",
"summary": "SUSE Bug 1214271 for CVE-2023-0767",
"url": "https://bugzilla.suse.com/1214271"
},
{
"category": "external",
"summary": "SUSE Bug 1218481 for CVE-2023-0767",
"url": "https://bugzilla.suse.com/1218481"
},
{
"category": "external",
"summary": "SUSE Bug 1218964 for CVE-2023-0767",
"url": "https://bugzilla.suse.com/1218964"
},
{
"category": "external",
"summary": "SUSE Bug 1225630 for CVE-2023-0767",
"url": "https://bugzilla.suse.com/1225630"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0767"
},
{
"cve": "CVE-2023-25728",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25728"
}
],
"notes": [
{
"category": "general",
"text": "The \u003ccode\u003eContent-Security-Policy-Report-Only\u003c/code\u003e header could allow an attacker to leak a child iframe\u0027s unredacted URI when interaction with that iframe triggers a redirect. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25728",
"url": "https://www.suse.com/security/cve/CVE-2023-25728"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25728",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25728"
},
{
"cve": "CVE-2023-25729",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25729"
}
],
"notes": [
{
"category": "general",
"text": "Permission prompts for opening external schemes were only shown for \u003ccode\u003eContentPrincipals\u003c/code\u003e resulting in extensions being able to open them without user interaction via \u003ccode\u003eExpandedPrincipals\u003c/code\u003e. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25729",
"url": "https://www.suse.com/security/cve/CVE-2023-25729"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25729",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25729"
},
{
"cve": "CVE-2023-25730",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25730"
}
],
"notes": [
{
"category": "general",
"text": "A background script invoking \u003ccode\u003erequestFullscreen\u003c/code\u003e and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25730",
"url": "https://www.suse.com/security/cve/CVE-2023-25730"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25730",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25730"
},
{
"cve": "CVE-2023-25732",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25732"
}
],
"notes": [
{
"category": "general",
"text": "When encoding data from an \u003ccode\u003einputStream\u003c/code\u003e in \u003ccode\u003expcom\u003c/code\u003e the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25732",
"url": "https://www.suse.com/security/cve/CVE-2023-25732"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25732",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25732"
},
{
"cve": "CVE-2023-25734",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25734"
}
],
"notes": [
{
"category": "general",
"text": "After downloading a Windows \u003ccode\u003e.url\u003c/code\u003e shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.\u003cbr\u003e*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25734",
"url": "https://www.suse.com/security/cve/CVE-2023-25734"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25734",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25734"
},
{
"cve": "CVE-2023-25735",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25735"
}
],
"notes": [
{
"category": "general",
"text": "Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25735",
"url": "https://www.suse.com/security/cve/CVE-2023-25735"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25735",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25735"
},
{
"cve": "CVE-2023-25737",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25737"
}
],
"notes": [
{
"category": "general",
"text": "An invalid downcast from \u003ccode\u003ensTextNode\u003c/code\u003e to \u003ccode\u003eSVGElement\u003c/code\u003e could have lead to undefined behavior. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25737",
"url": "https://www.suse.com/security/cve/CVE-2023-25737"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25737",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25737"
},
{
"cve": "CVE-2023-25738",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25738"
}
],
"notes": [
{
"category": "general",
"text": "Members of the \u003ccode\u003eDEVMODEW\u003c/code\u003e struct set by the printer device driver weren\u0027t being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.\u003cbr\u003e*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25738",
"url": "https://www.suse.com/security/cve/CVE-2023-25738"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25738",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25738"
},
{
"cve": "CVE-2023-25739",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25739"
}
],
"notes": [
{
"category": "general",
"text": "Module load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in \u003ccode\u003eScriptLoadContext\u003c/code\u003e. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25739",
"url": "https://www.suse.com/security/cve/CVE-2023-25739"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25739",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25739"
},
{
"cve": "CVE-2023-25742",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25742"
}
],
"notes": [
{
"category": "general",
"text": "When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25742",
"url": "https://www.suse.com/security/cve/CVE-2023-25742"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25742",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25742"
},
{
"cve": "CVE-2023-25743",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25743"
}
],
"notes": [
{
"category": "general",
"text": "A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\u003cbr\u003e*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox \u003c 110 and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25743",
"url": "https://www.suse.com/security/cve/CVE-2023-25743"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25743",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25743"
},
{
"cve": "CVE-2023-25744",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25744"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 110 and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25744",
"url": "https://www.suse.com/security/cve/CVE-2023-25744"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25744",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25744"
},
{
"cve": "CVE-2023-25746",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25746"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 102.8 and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25746",
"url": "https://www.suse.com/security/cve/CVE-2023-25746"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25746",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:libmozjs-102-0-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:mozjs102-devel-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25746"
}
]
}
OPENSUSE-SU-2024:12713-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "MozillaThunderbird-102.8.0-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the MozillaThunderbird-102.8.0-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-12713",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_12713-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0616 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0616/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0767 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25728 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25728/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25729 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25729/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25730 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25730/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25732 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25732/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25734 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25734/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25735 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25735/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25737 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25737/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25738 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25738/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25739 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25739/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25742 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25742/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-25746 page",
"url": "https://www.suse.com/security/cve/CVE-2023-25746/"
}
],
"title": "MozillaThunderbird-102.8.0-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:12713-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-102.8.0-1.1.aarch64",
"product": {
"name": "MozillaThunderbird-102.8.0-1.1.aarch64",
"product_id": "MozillaThunderbird-102.8.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"product": {
"name": "MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"product_id": "MozillaThunderbird-translations-common-102.8.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"product": {
"name": "MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"product_id": "MozillaThunderbird-translations-other-102.8.0-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-102.8.0-1.1.ppc64le",
"product": {
"name": "MozillaThunderbird-102.8.0-1.1.ppc64le",
"product_id": "MozillaThunderbird-102.8.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"product": {
"name": "MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"product_id": "MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"product": {
"name": "MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"product_id": "MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-102.8.0-1.1.s390x",
"product": {
"name": "MozillaThunderbird-102.8.0-1.1.s390x",
"product_id": "MozillaThunderbird-102.8.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"product": {
"name": "MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"product_id": "MozillaThunderbird-translations-common-102.8.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"product": {
"name": "MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"product_id": "MozillaThunderbird-translations-other-102.8.0-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-102.8.0-1.1.x86_64",
"product": {
"name": "MozillaThunderbird-102.8.0-1.1.x86_64",
"product_id": "MozillaThunderbird-102.8.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"product": {
"name": "MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"product_id": "MozillaThunderbird-translations-common-102.8.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-102.8.0-1.1.x86_64",
"product": {
"name": "MozillaThunderbird-translations-other-102.8.0-1.1.x86_64",
"product_id": "MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-102.8.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64"
},
"product_reference": "MozillaThunderbird-102.8.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-102.8.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le"
},
"product_reference": "MozillaThunderbird-102.8.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-102.8.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x"
},
"product_reference": "MozillaThunderbird-102.8.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-102.8.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64"
},
"product_reference": "MozillaThunderbird-102.8.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-102.8.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64"
},
"product_reference": "MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le"
},
"product_reference": "MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-102.8.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x"
},
"product_reference": "MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-102.8.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64"
},
"product_reference": "MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-102.8.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64"
},
"product_reference": "MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le"
},
"product_reference": "MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-102.8.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x"
},
"product_reference": "MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-102.8.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
},
"product_reference": "MozillaThunderbird-translations-other-102.8.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-0616",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0616"
}
],
"notes": [
{
"category": "general",
"text": "If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird\u0027s user interface to lock up and no longer respond to the user\u0027s actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0616",
"url": "https://www.suse.com/security/cve/CVE-2023-0616"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-0616",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-0616"
},
{
"cve": "CVE-2023-0767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0767"
}
],
"notes": [
{
"category": "general",
"text": "An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0767",
"url": "https://www.suse.com/security/cve/CVE-2023-0767"
},
{
"category": "external",
"summary": "SUSE Bug 1208138 for CVE-2023-0767",
"url": "https://bugzilla.suse.com/1208138"
},
{
"category": "external",
"summary": "SUSE Bug 1213200 for CVE-2023-0767",
"url": "https://bugzilla.suse.com/1213200"
},
{
"category": "external",
"summary": "SUSE Bug 1213818 for CVE-2023-0767",
"url": "https://bugzilla.suse.com/1213818"
},
{
"category": "external",
"summary": "SUSE Bug 1214271 for CVE-2023-0767",
"url": "https://bugzilla.suse.com/1214271"
},
{
"category": "external",
"summary": "SUSE Bug 1218481 for CVE-2023-0767",
"url": "https://bugzilla.suse.com/1218481"
},
{
"category": "external",
"summary": "SUSE Bug 1218964 for CVE-2023-0767",
"url": "https://bugzilla.suse.com/1218964"
},
{
"category": "external",
"summary": "SUSE Bug 1225630 for CVE-2023-0767",
"url": "https://bugzilla.suse.com/1225630"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0767"
},
{
"cve": "CVE-2023-25728",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25728"
}
],
"notes": [
{
"category": "general",
"text": "The \u003ccode\u003eContent-Security-Policy-Report-Only\u003c/code\u003e header could allow an attacker to leak a child iframe\u0027s unredacted URI when interaction with that iframe triggers a redirect. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25728",
"url": "https://www.suse.com/security/cve/CVE-2023-25728"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25728",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25728"
},
{
"cve": "CVE-2023-25729",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25729"
}
],
"notes": [
{
"category": "general",
"text": "Permission prompts for opening external schemes were only shown for \u003ccode\u003eContentPrincipals\u003c/code\u003e resulting in extensions being able to open them without user interaction via \u003ccode\u003eExpandedPrincipals\u003c/code\u003e. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25729",
"url": "https://www.suse.com/security/cve/CVE-2023-25729"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25729",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25729"
},
{
"cve": "CVE-2023-25730",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25730"
}
],
"notes": [
{
"category": "general",
"text": "A background script invoking \u003ccode\u003erequestFullscreen\u003c/code\u003e and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25730",
"url": "https://www.suse.com/security/cve/CVE-2023-25730"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25730",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25730"
},
{
"cve": "CVE-2023-25732",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25732"
}
],
"notes": [
{
"category": "general",
"text": "When encoding data from an \u003ccode\u003einputStream\u003c/code\u003e in \u003ccode\u003expcom\u003c/code\u003e the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25732",
"url": "https://www.suse.com/security/cve/CVE-2023-25732"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25732",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25732"
},
{
"cve": "CVE-2023-25734",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25734"
}
],
"notes": [
{
"category": "general",
"text": "After downloading a Windows \u003ccode\u003e.url\u003c/code\u003e shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.\u003cbr\u003e*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25734",
"url": "https://www.suse.com/security/cve/CVE-2023-25734"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25734",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25734"
},
{
"cve": "CVE-2023-25735",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25735"
}
],
"notes": [
{
"category": "general",
"text": "Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25735",
"url": "https://www.suse.com/security/cve/CVE-2023-25735"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25735",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25735"
},
{
"cve": "CVE-2023-25737",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25737"
}
],
"notes": [
{
"category": "general",
"text": "An invalid downcast from \u003ccode\u003ensTextNode\u003c/code\u003e to \u003ccode\u003eSVGElement\u003c/code\u003e could have lead to undefined behavior. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25737",
"url": "https://www.suse.com/security/cve/CVE-2023-25737"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25737",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25737"
},
{
"cve": "CVE-2023-25738",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25738"
}
],
"notes": [
{
"category": "general",
"text": "Members of the \u003ccode\u003eDEVMODEW\u003c/code\u003e struct set by the printer device driver weren\u0027t being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.\u003cbr\u003e*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25738",
"url": "https://www.suse.com/security/cve/CVE-2023-25738"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25738",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25738"
},
{
"cve": "CVE-2023-25739",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25739"
}
],
"notes": [
{
"category": "general",
"text": "Module load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in \u003ccode\u003eScriptLoadContext\u003c/code\u003e. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25739",
"url": "https://www.suse.com/security/cve/CVE-2023-25739"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25739",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25739"
},
{
"cve": "CVE-2023-25742",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25742"
}
],
"notes": [
{
"category": "general",
"text": "When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. This vulnerability affects Firefox \u003c 110, Thunderbird \u003c 102.8, and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25742",
"url": "https://www.suse.com/security/cve/CVE-2023-25742"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25742",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25742"
},
{
"cve": "CVE-2023-25746",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-25746"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 102.8 and Firefox ESR \u003c 102.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-25746",
"url": "https://www.suse.com/security/cve/CVE-2023-25746"
},
{
"category": "external",
"summary": "SUSE Bug 1208144 for CVE-2023-25746",
"url": "https://bugzilla.suse.com/1208144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-102.8.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-102.8.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-25746"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.