CVE-2023-5388 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.5 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 47%

Affected Products (NVD)

Vendor	Product	Version
mozilla	firefox_esr	𝑥 < 115.9.0
mozilla	firefox	𝑥 < 124.0
mozilla	thunderbird	𝑥 < 115.9.0
debian	debian_linux	10.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

firefox

bookworm	ignored
bullseye	no-dsa
sid	133.0.3-1 fixed

firefox-esr

bookworm	128.3.1esr-1~deb12u1 ignored
bookworm (security)	128.5.0esr-1~deb12u1 fixed
bullseye	115.14.0esr-1~deb11u1 no-dsa
bullseye (security)	128.5.0esr-1~deb11u1 fixed
sid	128.5.1esr-1 fixed
trixie	128.5.0esr-1 fixed

nss

bookworm	ignored
bookworm (security)	vulnerable
bullseye	no-dsa
bullseye (security)	vulnerable
sid	2:3.106-1 fixed
trixie	2:3.106-1 fixed

thunderbird

bookworm	1:115.16.0esr-1~deb12u1 ignored
bookworm (security)	1:128.5.0esr-1~deb12u1 fixed
bullseye	1:115.12.0-1~deb11u1 no-dsa
bullseye (security)	1:128.5.0esr-1~deb11u1 fixed
sid	1:128.5.2esr-1 fixed
trixie	1:128.5.2esr-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

firefox

focal	Fixed 124.0+build1-0ubuntu0.20.04.1 released
jammy	not-affected
mantic	not-affected
noble	not-affected
oracular	not-affected

mozjs102

focal	dne
jammy	ignored
mantic	ignored
noble	ignored
oracular	dne

mozjs38

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne
oracular	dne

mozjs52

bionic	ignored
focal	ignored
jammy	dne
mantic	dne
noble	dne
oracular	dne

mozjs68

focal	ignored
jammy	dne
mantic	dne
noble	dne
oracular	dne

mozjs78

focal	dne
jammy	ignored
mantic	dne
noble	dne
oracular	dne

mozjs91

focal	dne
jammy	ignored
mantic	dne
noble	dne
oracular	dne

nss

bionic	needed
focal	Fixed 2:3.98-0ubuntu0.20.04.1 released
jammy	Fixed 2:3.98-0ubuntu0.22.04.1 released
lunar	ignored
mantic	Fixed 2:3.98-0ubuntu0.23.10.1 released
noble	not-affected
oracular	not-affected
trusty	ignored
xenial	needed

thunderbird

focal	Fixed 1:115.9.0+build1-0ubuntu0.20.04.1 released
jammy	Fixed 1:115.9.0+build1-0ubuntu0.22.04.1 released
mantic	Fixed 1:115.9.0+build1-0ubuntu0.23.10.1 released
noble	not-affected
oracular	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

MozillaFirefox

suse enterprise desktop 15 SP5	115.9.1-150200.152.131.1 fixed
suse enterprise desktop 15 SP6	115.9.1-150200.152.131.1 fixed
suse enterprise desktop 15 SP7	115.9.1-150200.152.131.1 fixed
suse enterprise sap 12 SP5	115.9.0-112.203.2 fixed
suse enterprise sap 15 SP5	115.9.1-150200.152.131.1 fixed
suse enterprise sap 15 SP6	115.9.1-150200.152.131.1 fixed
suse enterprise sap 15 SP7	115.9.1-150200.152.131.1 fixed
suse enterprise server 12 SP3	115.9.0-112.203.2 fixed
suse enterprise server 12 SP5	115.9.0-112.203.2 fixed
suse enterprise server 15 SP2	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP3	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP4	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP5	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP6	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP7	115.9.1-150200.152.131.1 fixed

MozillaFirefox-devel

suse enterprise desktop 15 SP5	115.9.1-150200.152.131.1 fixed
suse enterprise sap 12 SP5	115.9.0-112.203.2 fixed
suse enterprise sap 15 SP5	115.9.1-150200.152.131.1 fixed
suse enterprise server 12 SP3	115.9.0-112.203.2 fixed
suse enterprise server 12 SP5	115.9.0-112.203.2 fixed
suse enterprise server 15 SP2	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP3	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP4	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP5	115.9.1-150200.152.131.1 fixed

MozillaFirefox-translations-common

suse enterprise desktop 15 SP5	115.9.1-150200.152.131.1 fixed
suse enterprise desktop 15 SP6	115.9.1-150200.152.131.1 fixed
suse enterprise desktop 15 SP7	115.9.1-150200.152.131.1 fixed
suse enterprise sap 12 SP5	115.9.0-112.203.2 fixed
suse enterprise sap 15 SP5	115.9.1-150200.152.131.1 fixed
suse enterprise sap 15 SP6	115.9.1-150200.152.131.1 fixed
suse enterprise sap 15 SP7	115.9.1-150200.152.131.1 fixed
suse enterprise server 12 SP3	115.9.0-112.203.2 fixed
suse enterprise server 12 SP5	115.9.0-112.203.2 fixed
suse enterprise server 15 SP2	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP3	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP4	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP5	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP6	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP7	115.9.1-150200.152.131.1 fixed

MozillaFirefox-translations-other

suse enterprise desktop 15 SP5	115.9.1-150200.152.131.1 fixed
suse enterprise desktop 15 SP6	115.9.1-150200.152.131.1 fixed
suse enterprise desktop 15 SP7	115.9.1-150200.152.131.1 fixed
suse enterprise sap 15 SP5	115.9.1-150200.152.131.1 fixed
suse enterprise sap 15 SP6	115.9.1-150200.152.131.1 fixed
suse enterprise sap 15 SP7	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP2	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP3	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP4	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP5	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP6	115.9.1-150200.152.131.1 fixed
suse enterprise server 15 SP7	115.9.1-150200.152.131.1 fixed

MozillaThunderbird

suse enterprise desktop 15 SP5	115.9.0-150200.8.154.1 fixed
suse enterprise desktop 15 SP6	115.9.0-150200.8.154.1 fixed
suse enterprise desktop 15 SP7	115.9.0-150200.8.154.1 fixed
suse enterprise sap 15 SP5	115.9.0-150200.8.154.1 fixed
suse enterprise sap 15 SP6	115.9.0-150200.8.154.1 fixed
suse enterprise sap 15 SP7	115.9.0-150200.8.154.1 fixed
suse enterprise server 15 SP5	115.9.0-150200.8.154.1 fixed
suse enterprise server 15 SP6	115.9.0-150200.8.154.1 fixed
suse enterprise server 15 SP7	115.9.0-150200.8.154.1 fixed
suse enterprise workstation 15 SP5	115.9.0-150200.8.154.1 fixed
suse enterprise workstation 15 SP6	115.9.0-150200.8.154.1 fixed
suse enterprise workstation 15 SP7	115.9.0-150200.8.154.1 fixed

MozillaThunderbird-translations-common

suse enterprise desktop 15 SP5	115.9.0-150200.8.154.1 fixed
suse enterprise desktop 15 SP6	115.9.0-150200.8.154.1 fixed
suse enterprise desktop 15 SP7	115.9.0-150200.8.154.1 fixed
suse enterprise sap 15 SP5	115.9.0-150200.8.154.1 fixed
suse enterprise sap 15 SP6	115.9.0-150200.8.154.1 fixed
suse enterprise sap 15 SP7	115.9.0-150200.8.154.1 fixed
suse enterprise server 15 SP5	115.9.0-150200.8.154.1 fixed
suse enterprise server 15 SP6	115.9.0-150200.8.154.1 fixed
suse enterprise server 15 SP7	115.9.0-150200.8.154.1 fixed
suse enterprise workstation 15 SP5	115.9.0-150200.8.154.1 fixed
suse enterprise workstation 15 SP6	115.9.0-150200.8.154.1 fixed
suse enterprise workstation 15 SP7	115.9.0-150200.8.154.1 fixed

MozillaThunderbird-translations-other

suse enterprise desktop 15 SP5	115.9.0-150200.8.154.1 fixed
suse enterprise desktop 15 SP6	115.9.0-150200.8.154.1 fixed
suse enterprise desktop 15 SP7	115.9.0-150200.8.154.1 fixed
suse enterprise sap 15 SP5	115.9.0-150200.8.154.1 fixed
suse enterprise sap 15 SP6	115.9.0-150200.8.154.1 fixed
suse enterprise sap 15 SP7	115.9.0-150200.8.154.1 fixed
suse enterprise server 15 SP5	115.9.0-150200.8.154.1 fixed
suse enterprise server 15 SP6	115.9.0-150200.8.154.1 fixed
suse enterprise server 15 SP7	115.9.0-150200.8.154.1 fixed
suse enterprise workstation 15 SP5	115.9.0-150200.8.154.1 fixed
suse enterprise workstation 15 SP6	115.9.0-150200.8.154.1 fixed
suse enterprise workstation 15 SP7	115.9.0-150200.8.154.1 fixed

libfreebl3

suse enterprise desktop 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise sap 12 SP5	3.101.1-58.118.1 fixed
suse enterprise sap 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise server 12 SP3	3.101.1-58.118.1 fixed
suse enterprise server 12 SP5	3.101.1-58.118.1 fixed
suse enterprise server 15 SP2	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP3	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP4	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.90.2-150400.3.39.1 fixed

libfreebl3-32bit

suse enterprise desktop 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise sap 12 SP5	3.101.1-58.118.1 fixed
suse enterprise sap 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise server 12 SP3	3.101.1-58.118.1 fixed
suse enterprise server 12 SP5	3.101.1-58.118.1 fixed
suse enterprise server 15 SP2	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP3	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP4	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.90.2-150400.3.39.1 fixed

libsoftokn3

suse enterprise desktop 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise sap 12 SP5	3.101.1-58.118.1 fixed
suse enterprise sap 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise server 12 SP3	3.101.1-58.118.1 fixed
suse enterprise server 12 SP5	3.101.1-58.118.1 fixed
suse enterprise server 15 SP2	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP3	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP4	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.90.2-150400.3.39.1 fixed

libsoftokn3-32bit

suse enterprise desktop 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise sap 12 SP5	3.101.1-58.118.1 fixed
suse enterprise sap 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise server 12 SP3	3.101.1-58.118.1 fixed
suse enterprise server 12 SP5	3.101.1-58.118.1 fixed
suse enterprise server 15 SP2	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP3	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP4	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.90.2-150400.3.39.1 fixed

mozilla-nss

suse enterprise desktop 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise sap 12 SP5	3.101.1-58.118.1 fixed
suse enterprise sap 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise server 12 SP3	3.101.1-58.118.1 fixed
suse enterprise server 12 SP5	3.101.1-58.118.1 fixed
suse enterprise server 15 SP2	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP3	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP4	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.90.2-150400.3.39.1 fixed

mozilla-nss-32bit

suse enterprise desktop 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise sap 12 SP5	3.101.1-58.118.1 fixed
suse enterprise sap 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise server 12 SP3	3.101.1-58.118.1 fixed
suse enterprise server 12 SP5	3.101.1-58.118.1 fixed
suse enterprise server 15 SP2	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP3	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP4	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.90.2-150400.3.39.1 fixed

mozilla-nss-certs

suse enterprise desktop 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise sap 12 SP5	3.101.1-58.118.1 fixed
suse enterprise sap 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise server 12 SP3	3.101.1-58.118.1 fixed
suse enterprise server 12 SP5	3.101.1-58.118.1 fixed
suse enterprise server 15 SP2	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP3	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP4	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.90.2-150400.3.39.1 fixed

mozilla-nss-certs-32bit

suse enterprise desktop 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise sap 12 SP5	3.101.1-58.118.1 fixed
suse enterprise sap 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise server 12 SP3	3.101.1-58.118.1 fixed
suse enterprise server 12 SP5	3.101.1-58.118.1 fixed
suse enterprise server 15 SP2	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP3	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP4	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.90.2-150400.3.39.1 fixed

mozilla-nss-devel

suse enterprise desktop 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise sap 12 SP5	3.101.1-58.118.1 fixed
suse enterprise sap 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise server 12 SP3	3.101.1-58.118.1 fixed
suse enterprise server 12 SP5	3.101.1-58.118.1 fixed
suse enterprise server 15 SP2	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP3	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP4	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.90.2-150400.3.39.1 fixed

mozilla-nss-sysinit

suse enterprise desktop 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise sap 12 SP5	3.101.1-58.118.1 fixed
suse enterprise sap 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise server 12 SP3	3.101.1-58.118.1 fixed
suse enterprise server 12 SP5	3.101.1-58.118.1 fixed
suse enterprise server 15 SP2	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP3	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP4	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.90.2-150400.3.39.1 fixed

mozilla-nss-sysinit-32bit

suse enterprise sap 12 SP5	3.101.1-58.118.1 fixed
suse enterprise server 12 SP3	3.101.1-58.118.1 fixed
suse enterprise server 12 SP5	3.101.1-58.118.1 fixed
suse enterprise server 15 SP3	3.101.1-150000.3.117.1 fixed

mozilla-nss-tools

suse enterprise desktop 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise sap 12 SP5	3.101.1-58.118.1 fixed
suse enterprise sap 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.90.2-150400.3.39.1 fixed
suse enterprise server 12 SP3	3.101.1-58.118.1 fixed
suse enterprise server 12 SP5	3.101.1-58.118.1 fixed
suse enterprise server 15 SP2	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP3	3.101.1-150000.3.117.1 fixed
suse enterprise server 15 SP4	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP5	3.101.2-150400.3.48.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.90.2-150400.3.39.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

firefox

RHEL 7	0:115.9.1-1.el7_9 fixed
RHEL 9	0:115.9.1-1.el9_3 fixed

firefox-x11

RHEL 9

0:115.9.1-1.el9_3

fixed

nspr

RHEL 9

0:4.35.0-4.el9_3

fixed

nspr-devel

RHEL 9

0:4.35.0-4.el9_3

fixed

nss

RHEL 8	0:3.90.0-4.el8_9 fixed
RHEL 8.6 AUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 E4S	0:3.79.0-12.el8_6 fixed
RHEL 8.6 EUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 TUS	0:3.79.0-12.el8_6 fixed
RHEL 8.8 AUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 E4S	0:3.90.0-4.el8_8 fixed
RHEL 8.8 EUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 TUS	0:3.90.0-4.el8_8 fixed
RHEL 9	0:3.90.0-4.el9_3 fixed

nss-devel

RHEL 8	0:3.90.0-4.el8_9 fixed
RHEL 8.6 AUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 E4S	0:3.79.0-12.el8_6 fixed
RHEL 8.6 EUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 TUS	0:3.79.0-12.el8_6 fixed
RHEL 8.8 AUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 E4S	0:3.90.0-4.el8_8 fixed
RHEL 8.8 EUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 TUS	0:3.90.0-4.el8_8 fixed
RHEL 9	0:3.90.0-4.el9_3 fixed

nss-softokn

RHEL 8	0:3.90.0-4.el8_9 fixed
RHEL 8.6 AUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 E4S	0:3.79.0-12.el8_6 fixed
RHEL 8.6 EUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 TUS	0:3.79.0-12.el8_6 fixed
RHEL 8.8 AUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 E4S	0:3.90.0-4.el8_8 fixed
RHEL 8.8 EUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 TUS	0:3.90.0-4.el8_8 fixed
RHEL 9	0:3.90.0-4.el9_3 fixed

nss-softokn-devel

RHEL 8	0:3.90.0-4.el8_9 fixed
RHEL 8.6 AUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 E4S	0:3.79.0-12.el8_6 fixed
RHEL 8.6 EUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 TUS	0:3.79.0-12.el8_6 fixed
RHEL 8.8 AUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 E4S	0:3.90.0-4.el8_8 fixed
RHEL 8.8 EUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 TUS	0:3.90.0-4.el8_8 fixed
RHEL 9	0:3.90.0-4.el9_3 fixed

nss-softokn-freebl

RHEL 8	0:3.90.0-4.el8_9 fixed
RHEL 8.6 AUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 E4S	0:3.79.0-12.el8_6 fixed
RHEL 8.6 EUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 TUS	0:3.79.0-12.el8_6 fixed
RHEL 8.8 AUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 E4S	0:3.90.0-4.el8_8 fixed
RHEL 8.8 EUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 TUS	0:3.90.0-4.el8_8 fixed
RHEL 9	0:3.90.0-4.el9_3 fixed

nss-softokn-freebl-devel

RHEL 8	0:3.90.0-4.el8_9 fixed
RHEL 8.6 AUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 E4S	0:3.79.0-12.el8_6 fixed
RHEL 8.6 EUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 TUS	0:3.79.0-12.el8_6 fixed
RHEL 8.8 AUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 E4S	0:3.90.0-4.el8_8 fixed
RHEL 8.8 EUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 TUS	0:3.90.0-4.el8_8 fixed
RHEL 9	0:3.90.0-4.el9_3 fixed

nss-sysinit

RHEL 8	0:3.90.0-4.el8_9 fixed
RHEL 8.6 AUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 E4S	0:3.79.0-12.el8_6 fixed
RHEL 8.6 EUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 TUS	0:3.79.0-12.el8_6 fixed
RHEL 8.8 AUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 E4S	0:3.90.0-4.el8_8 fixed
RHEL 8.8 EUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 TUS	0:3.90.0-4.el8_8 fixed
RHEL 9	0:3.90.0-4.el9_3 fixed

nss-tools

RHEL 8	0:3.90.0-4.el8_9 fixed
RHEL 8.6 AUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 E4S	0:3.79.0-12.el8_6 fixed
RHEL 8.6 EUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 TUS	0:3.79.0-12.el8_6 fixed
RHEL 8.8 AUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 E4S	0:3.90.0-4.el8_8 fixed
RHEL 8.8 EUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 TUS	0:3.90.0-4.el8_8 fixed
RHEL 9	0:3.90.0-4.el9_3 fixed

nss-util

RHEL 8	0:3.90.0-4.el8_9 fixed
RHEL 8.6 AUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 E4S	0:3.79.0-12.el8_6 fixed
RHEL 8.6 EUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 TUS	0:3.79.0-12.el8_6 fixed
RHEL 8.8 AUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 E4S	0:3.90.0-4.el8_8 fixed
RHEL 8.8 EUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 TUS	0:3.90.0-4.el8_8 fixed
RHEL 9	0:3.90.0-4.el9_3 fixed

nss-util-devel

RHEL 8	0:3.90.0-4.el8_9 fixed
RHEL 8.6 AUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 E4S	0:3.79.0-12.el8_6 fixed
RHEL 8.6 EUS	0:3.79.0-12.el8_6 fixed
RHEL 8.6 TUS	0:3.79.0-12.el8_6 fixed
RHEL 8.8 AUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 E4S	0:3.90.0-4.el8_8 fixed
RHEL 8.8 EUS	0:3.90.0-4.el8_8 fixed
RHEL 8.8 TUS	0:3.90.0-4.el8_8 fixed
RHEL 9	0:3.90.0-4.el9_3 fixed

thunderbird

RHEL 7	0:115.9.0-1.el7_9 fixed
RHEL 9	0:115.9.0-1.el9_3 fixed

Common Weakness Enumeration

CWE-203 - Observable Discrepancy
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1780432

https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html

https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html

https://www.mozilla.org/security/advisories/mfsa2024-12/

https://www.mozilla.org/security/advisories/mfsa2024-13/

https://www.mozilla.org/security/advisories/mfsa2024-14/

https://bugzilla.mozilla.org/show_bug.cgi?id=1780432

https://lists.debian.org/debian-lts-announce/2024/03/msg00010.html

https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html

https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html

https://www.mozilla.org/security/advisories/mfsa2024-12/

https://www.mozilla.org/security/advisories/mfsa2024-13/

https://www.mozilla.org/security/advisories/mfsa2024-14/