csaf_suse - suse-su-2022:1719-1

Vulnerability from csaf_suse

Published

2022-05-17 15:45

Modified

2022-05-17 15:45

Summary

Security update for MozillaThunderbird

Notes

Title of the patch

Security update for MozillaThunderbird

Description of the patch

This update for MozillaThunderbird fixes the following issues: Various security fixes MFSA 2022-18 (bsc#1198970): - CVE-2022-1520: Incorrect security status shown after viewing an attached email (bmo#1745019). - CVE-2022-29914: Fullscreen notification bypass using popups (bmo#1746448). - CVE-2022-29909: Bypassing permission prompt in nested browsing contexts (bmo#1755081). - CVE-2022-29916: Leaking browser history with CSS variables (bmo#1760674). - CVE-2022-29911: iframe sandbox bypass (bmo#1761981). - CVE-2022-29912: Reader mode bypassed SameSite cookies (bmo#1692655). - CVE-2022-29913: Speech Synthesis feature not properly disabled (bmo#1764778). - CVE-2022-29917: Memory safety bugs fixed in Thunderbird 91.9 (bmo#1684739, bmo#1706441, bmo#1753298, bmo#1762614, bmo#1762620).

Patchnames

SUSE-2022-1719,SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-1719,SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-1719,SUSE-SLE-Product-WE-15-SP3-2022-1719,SUSE-SLE-Product-WE-15-SP4-2022-1719,openSUSE-SLE-15.3-2022-1719,openSUSE-SLE-15.4-2022-1719

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for MozillaThunderbird",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for MozillaThunderbird fixes the following issues:\n\nVarious security fixes MFSA 2022-18 (bsc#1198970):\n\n- CVE-2022-1520: Incorrect security status shown after viewing an attached email (bmo#1745019).\n- CVE-2022-29914: Fullscreen notification bypass using popups (bmo#1746448).\n- CVE-2022-29909: Bypassing permission prompt in nested browsing contexts (bmo#1755081).\n- CVE-2022-29916: Leaking browser history with CSS variables (bmo#1760674).\n- CVE-2022-29911: iframe sandbox bypass (bmo#1761981).\n- CVE-2022-29912: Reader mode bypassed SameSite cookies (bmo#1692655).\n- CVE-2022-29913: Speech Synthesis feature not properly disabled (bmo#1764778).\n- CVE-2022-29917: Memory safety bugs fixed in Thunderbird 91.9 (bmo#1684739, bmo#1706441, bmo#1753298, bmo#1762614, bmo#1762620).\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2022-1719,SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-1719,SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-1719,SUSE-SLE-Product-WE-15-SP3-2022-1719,SUSE-SLE-Product-WE-15-SP4-2022-1719,openSUSE-SLE-15.3-2022-1719,openSUSE-SLE-15.4-2022-1719",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_1719-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2022:1719-1",
            url: "https://www.suse.com/support/update/announcement/2022/suse-su-20221719-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2022:1719-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2022-May/011060.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1198970",
            url: "https://bugzilla.suse.com/1198970",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-1520 page",
            url: "https://www.suse.com/security/cve/CVE-2022-1520/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-29909 page",
            url: "https://www.suse.com/security/cve/CVE-2022-29909/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-29911 page",
            url: "https://www.suse.com/security/cve/CVE-2022-29911/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-29912 page",
            url: "https://www.suse.com/security/cve/CVE-2022-29912/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-29913 page",
            url: "https://www.suse.com/security/cve/CVE-2022-29913/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-29914 page",
            url: "https://www.suse.com/security/cve/CVE-2022-29914/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-29916 page",
            url: "https://www.suse.com/security/cve/CVE-2022-29916/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-29917 page",
            url: "https://www.suse.com/security/cve/CVE-2022-29917/",
         },
      ],
      title: "Security update for MozillaThunderbird",
      tracking: {
         current_release_date: "2022-05-17T15:45:34Z",
         generator: {
            date: "2022-05-17T15:45:34Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2022:1719-1",
         initial_release_date: "2022-05-17T15:45:34Z",
         revision_history: [
            {
               date: "2022-05-17T15:45:34Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                        product: {
                           name: "MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                           product_id: "MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                        product: {
                           name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                           product_id: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                        product: {
                           name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                           product_id: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-91.9.0-150200.8.68.2.i686",
                        product: {
                           name: "MozillaThunderbird-91.9.0-150200.8.68.2.i686",
                           product_id: "MozillaThunderbird-91.9.0-150200.8.68.2.i686",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.i686",
                        product: {
                           name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.i686",
                           product_id: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.i686",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.i686",
                        product: {
                           name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.i686",
                           product_id: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.i686",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i686",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                        product: {
                           name: "MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                           product_id: "MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                        product: {
                           name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                           product_id: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                        product: {
                           name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                           product_id: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                        product: {
                           name: "MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                           product_id: "MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                        product: {
                           name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                           product_id: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                        product: {
                           name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                           product_id: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                        product: {
                           name: "MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                           product_id: "MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                        product: {
                           name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                           product_id: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                        product: {
                           name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                           product_id: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Module for Package Hub 15 SP3",
                        product: {
                           name: "SUSE Linux Enterprise Module for Package Hub 15 SP3",
                           product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:packagehub:15:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Module for Package Hub 15 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Module for Package Hub 15 SP4",
                           product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:packagehub:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Workstation Extension 15 SP3",
                        product: {
                           name: "SUSE Linux Enterprise Workstation Extension 15 SP3",
                           product_id: "SUSE Linux Enterprise Workstation Extension 15 SP3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-we:15:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Workstation Extension 15 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Workstation Extension 15 SP4",
                           product_id: "SUSE Linux Enterprise Workstation Extension 15 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-we:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "openSUSE Leap 15.3",
                        product: {
                           name: "openSUSE Leap 15.3",
                           product_id: "openSUSE Leap 15.3",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:leap:15.3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "openSUSE Leap 15.4",
                        product: {
                           name: "openSUSE Leap 15.4",
                           product_id: "openSUSE Leap 15.4",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:leap:15.4",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-91.9.0-150200.8.68.2.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP3",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
            },
            product_reference: "MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP3",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
            },
            product_reference: "MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-91.9.0-150200.8.68.2.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP3",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
            },
            product_reference: "MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP3",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
            },
            product_reference: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP3",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
            },
            product_reference: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP3",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
            },
            product_reference: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP3",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
            },
            product_reference: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP3",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
            },
            product_reference: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP3",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
            },
            product_reference: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-91.9.0-150200.8.68.2.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
            },
            product_reference: "MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
            },
            product_reference: "MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-91.9.0-150200.8.68.2.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
            },
            product_reference: "MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
            },
            product_reference: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
            },
            product_reference: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
            },
            product_reference: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
            },
            product_reference: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
            },
            product_reference: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
            },
            product_reference: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-91.9.0-150200.8.68.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP3",
               product_id: "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
            },
            product_reference: "MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 15 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP3",
               product_id: "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
            },
            product_reference: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 15 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP3",
               product_id: "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
            },
            product_reference: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 15 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-91.9.0-150200.8.68.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP4",
               product_id: "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
            },
            product_reference: "MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP4",
               product_id: "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
            },
            product_reference: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP4",
               product_id: "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
            },
            product_reference: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-91.9.0-150200.8.68.2.aarch64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
            },
            product_reference: "MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
            },
            product_reference: "MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-91.9.0-150200.8.68.2.s390x as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
            },
            product_reference: "MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-91.9.0-150200.8.68.2.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
            },
            product_reference: "MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
            },
            product_reference: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
            },
            product_reference: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
            },
            product_reference: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
            },
            product_reference: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
            },
            product_reference: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
            },
            product_reference: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
            },
            product_reference: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
            },
            product_reference: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-91.9.0-150200.8.68.2.aarch64 as component of openSUSE Leap 15.4",
               product_id: "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
            },
            product_reference: "MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le as component of openSUSE Leap 15.4",
               product_id: "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
            },
            product_reference: "MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-91.9.0-150200.8.68.2.s390x as component of openSUSE Leap 15.4",
               product_id: "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
            },
            product_reference: "MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
            relates_to_product_reference: "openSUSE Leap 15.4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-91.9.0-150200.8.68.2.x86_64 as component of openSUSE Leap 15.4",
               product_id: "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
            },
            product_reference: "MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64 as component of openSUSE Leap 15.4",
               product_id: "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
            },
            product_reference: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le as component of openSUSE Leap 15.4",
               product_id: "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
            },
            product_reference: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x as component of openSUSE Leap 15.4",
               product_id: "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
            },
            product_reference: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
            relates_to_product_reference: "openSUSE Leap 15.4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64 as component of openSUSE Leap 15.4",
               product_id: "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
            },
            product_reference: "MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64 as component of openSUSE Leap 15.4",
               product_id: "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
            },
            product_reference: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le as component of openSUSE Leap 15.4",
               product_id: "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
            },
            product_reference: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x as component of openSUSE Leap 15.4",
               product_id: "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
            },
            product_reference: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
            relates_to_product_reference: "openSUSE Leap 15.4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64 as component of openSUSE Leap 15.4",
               product_id: "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
            },
            product_reference: "MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.4",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2022-1520",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-1520",
            },
         ],
         notes: [
            {
               category: "general",
               text: "When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status. After opening and viewing the attached message B, when returning to the display of message A, the message A might be shown with the security status of message B. This vulnerability affects Thunderbird < 91.9.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-1520",
               url: "https://www.suse.com/security/cve/CVE-2022-1520",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-05-17T15:45:34Z",
               details: "important",
            },
         ],
         title: "CVE-2022-1520",
      },
      {
         cve: "CVE-2022-29909",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-29909",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the existing prompt and wrongfully inheriting the top-level permissions. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-29909",
               url: "https://www.suse.com/security/cve/CVE-2022-29909",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-05-17T15:45:34Z",
               details: "important",
            },
         ],
         title: "CVE-2022-29909",
      },
      {
         cve: "CVE-2022-29911",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-29911",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user-activation</code> could lead to script execution without <code>allow-scripts</code> being present. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-29911",
               url: "https://www.suse.com/security/cve/CVE-2022-29911",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-05-17T15:45:34Z",
               details: "important",
            },
         ],
         title: "CVE-2022-29911",
      },
      {
         cve: "CVE-2022-29912",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-29912",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Requests initiated through reader mode did not properly omit cookies with a SameSite attribute. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-29912",
               url: "https://www.suse.com/security/cve/CVE-2022-29912",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-05-17T15:45:34Z",
               details: "important",
            },
         ],
         title: "CVE-2022-29912",
      },
      {
         cve: "CVE-2022-29913",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-29913",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child process. This vulnerability affects Thunderbird < 91.9.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-29913",
               url: "https://www.suse.com/security/cve/CVE-2022-29913",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-05-17T15:45:34Z",
               details: "important",
            },
         ],
         title: "CVE-2022-29913",
      },
      {
         cve: "CVE-2022-29914",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-29914",
            },
         ],
         notes: [
            {
               category: "general",
               text: "When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-29914",
               url: "https://www.suse.com/security/cve/CVE-2022-29914",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-05-17T15:45:34Z",
               details: "important",
            },
         ],
         title: "CVE-2022-29914",
      },
      {
         cve: "CVE-2022-29916",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-29916",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables. This could have been used to probe the browser history. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-29916",
               url: "https://www.suse.com/security/cve/CVE-2022-29916",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-05-17T15:45:34Z",
               details: "important",
            },
         ],
         title: "CVE-2022-29916",
      },
      {
         cve: "CVE-2022-29917",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-29917",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
               "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-29917",
               url: "https://www.suse.com/security/cve/CVE-2022-29917",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-common-91.9.0-150200.8.68.2.x86_64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.aarch64",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.ppc64le",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.s390x",
                  "openSUSE Leap 15.4:MozillaThunderbird-translations-other-91.9.0-150200.8.68.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-05-17T15:45:34Z",
               details: "important",
            },
         ],
         title: "CVE-2022-29917",
      },
   ],
}

cve-2022-29914

Vulnerability from cvelistv5

Published

2022-12-22 00:00

Modified

2025-04-15 19:58

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Summary

When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

References

▼	URL	Tags
	https://www.mozilla.org/security/advisories/mfsa2022-16/
	https://www.mozilla.org/security/advisories/mfsa2022-18/
	https://www.mozilla.org/security/advisories/mfsa2022-17/
	https://bugzilla.mozilla.org/show_bug.cgi?id=1746448

Impacted products

Vendor

Product

Version

▼

Mozilla

Thunderbird

Version: unspecified < 91.9

	Mozilla	Firefox ESR	Version: unspecified < 91.9
	Mozilla	Firefox	Version: unspecified < 100

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T06:33:43.194Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-16/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-18/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-17/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1746448",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "NONE",
                     baseScore: 6.5,
                     baseSeverity: "MEDIUM",
                     confidentialityImpact: "NONE",
                     integrityImpact: "HIGH",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2022-29914",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-04-15T19:58:16.711127Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-1021",
                        description: "CWE-1021 Improper Restriction of Rendered UI Layers or Frames",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-04-15T19:58:21.812Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "91.9",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox ESR",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "91.9",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "100",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Fullscreen notification bypass using popups",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-12-22T00:00:00.000Z",
            orgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
            shortName: "mozilla",
         },
         references: [
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-16/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-18/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-17/",
            },
            {
               url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1746448",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
      assignerShortName: "mozilla",
      cveId: "CVE-2022-29914",
      datePublished: "2022-12-22T00:00:00.000Z",
      dateReserved: "2022-04-29T00:00:00.000Z",
      dateUpdated: "2025-04-15T19:58:21.812Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-29913

Vulnerability from cvelistv5

Published

2022-12-22 00:00

Modified

2025-04-15 20:00

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Summary

The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child process. This vulnerability affects Thunderbird < 91.9.

References

▼	URL	Tags
	https://www.mozilla.org/security/advisories/mfsa2022-18/
	https://bugzilla.mozilla.org/show_bug.cgi?id=1764778

Impacted products

	Vendor	Product	Version
	Mozilla	Thunderbird	Version: unspecified < 91.9

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T06:33:43.161Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-18/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1764778",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "NONE",
                     baseScore: 6.5,
                     baseSeverity: "MEDIUM",
                     confidentialityImpact: "NONE",
                     integrityImpact: "HIGH",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2022-29913",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-04-15T20:00:48.491206Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-285",
                        description: "CWE-285 Improper Authorization",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-04-15T20:00:52.594Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "91.9",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child process. This vulnerability affects Thunderbird < 91.9.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Speech Synthesis feature not properly disabled",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-12-22T00:00:00.000Z",
            orgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
            shortName: "mozilla",
         },
         references: [
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-18/",
            },
            {
               url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1764778",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
      assignerShortName: "mozilla",
      cveId: "CVE-2022-29913",
      datePublished: "2022-12-22T00:00:00.000Z",
      dateReserved: "2022-04-29T00:00:00.000Z",
      dateUpdated: "2025-04-15T20:00:52.594Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-29916

Vulnerability from cvelistv5

Published

2022-12-22 00:00

Modified

2025-04-15 15:08

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables. This could have been used to probe the browser history. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

References

▼	URL	Tags
	https://www.mozilla.org/security/advisories/mfsa2022-16/
	https://www.mozilla.org/security/advisories/mfsa2022-18/
	https://www.mozilla.org/security/advisories/mfsa2022-17/
	https://bugzilla.mozilla.org/show_bug.cgi?id=1760674

Impacted products

Vendor

Product

Version

▼

Mozilla

Thunderbird

Version: unspecified < 91.9

	Mozilla	Firefox ESR	Version: unspecified < 91.9
	Mozilla	Firefox	Version: unspecified < 100

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T06:33:43.182Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-16/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-18/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-17/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1760674",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "NONE",
                     baseScore: 6.5,
                     baseSeverity: "MEDIUM",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "NONE",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2022-29916",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-04-15T15:07:07.405962Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-200",
                        description: "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-04-15T15:08:08.311Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "91.9",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox ESR",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "91.9",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "100",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables. This could have been used to probe the browser history. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Leaking browser history with CSS variables",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-12-22T00:00:00.000Z",
            orgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
            shortName: "mozilla",
         },
         references: [
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-16/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-18/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-17/",
            },
            {
               url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1760674",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
      assignerShortName: "mozilla",
      cveId: "CVE-2022-29916",
      datePublished: "2022-12-22T00:00:00.000Z",
      dateReserved: "2022-04-29T00:00:00.000Z",
      dateUpdated: "2025-04-15T15:08:08.311Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-1520

Vulnerability from cvelistv5

Published

2022-12-22 00:00

Modified

2025-04-16 15:20

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Summary

When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status. After opening and viewing the attached message B, when returning to the display of message A, the message A might be shown with the security status of message B. This vulnerability affects Thunderbird < 91.9.

References

▼	URL	Tags
	https://www.mozilla.org/security/advisories/mfsa2022-18/
	https://bugzilla.mozilla.org/show_bug.cgi?id=1745019

Impacted products

	Vendor	Product	Version
	Mozilla	Thunderbird	Version: unspecified < 91.9

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T00:10:02.838Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-18/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1745019",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "NONE",
                     baseScore: 4.3,
                     baseSeverity: "MEDIUM",
                     confidentialityImpact: "NONE",
                     integrityImpact: "LOW",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2022-1520",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-04-16T15:20:55.316255Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-346",
                        description: "CWE-346 Origin Validation Error",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-04-16T15:20:58.943Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "91.9",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status. After opening and viewing the attached message B, when returning to the display of message A, the message A might be shown with the security status of message B. This vulnerability affects Thunderbird < 91.9.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Incorrect security status shown after viewing an attached email",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-12-22T00:00:00.000Z",
            orgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
            shortName: "mozilla",
         },
         references: [
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-18/",
            },
            {
               url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1745019",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
      assignerShortName: "mozilla",
      cveId: "CVE-2022-1520",
      datePublished: "2022-12-22T00:00:00.000Z",
      dateReserved: "2022-04-28T00:00:00.000Z",
      dateUpdated: "2025-04-16T15:20:58.943Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-29909

Vulnerability from cvelistv5

Published

2022-12-22 00:00

Modified

2025-04-16 13:47

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the existing prompt and wrongfully inheriting the top-level permissions. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

References

▼	URL	Tags
	https://www.mozilla.org/security/advisories/mfsa2022-16/
	https://www.mozilla.org/security/advisories/mfsa2022-18/
	https://www.mozilla.org/security/advisories/mfsa2022-17/
	https://bugzilla.mozilla.org/show_bug.cgi?id=1755081

Impacted products

Vendor

Product

Version

▼

Mozilla

Thunderbird

Version: unspecified < 91.9

	Mozilla	Firefox ESR	Version: unspecified < 91.9
	Mozilla	Firefox	Version: unspecified < 100

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T06:33:43.165Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-16/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-18/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-17/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1755081",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "HIGH",
                     baseScore: 8.8,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2022-29909",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-04-16T13:47:34.586126Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-276",
                        description: "CWE-276 Incorrect Default Permissions",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-04-16T13:47:38.937Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            references: [
               {
                  tags: [
                     "exploit",
                  ],
                  url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1755081",
               },
            ],
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "91.9",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox ESR",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "91.9",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "100",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the existing prompt and wrongfully inheriting the top-level permissions. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Bypassing permission prompt in nested browsing contexts",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-12-22T00:00:00.000Z",
            orgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
            shortName: "mozilla",
         },
         references: [
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-16/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-18/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-17/",
            },
            {
               url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1755081",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
      assignerShortName: "mozilla",
      cveId: "CVE-2022-29909",
      datePublished: "2022-12-22T00:00:00.000Z",
      dateReserved: "2022-04-29T00:00:00.000Z",
      dateUpdated: "2025-04-16T13:47:38.937Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-29911

Vulnerability from cvelistv5

Published

2022-12-22 00:00

Modified

2025-04-16 13:58

Severity ?

6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Summary

An improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user-activation</code> could lead to script execution without <code>allow-scripts</code> being present. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

References

▼	URL	Tags
	https://www.mozilla.org/security/advisories/mfsa2022-16/
	https://www.mozilla.org/security/advisories/mfsa2022-18/
	https://www.mozilla.org/security/advisories/mfsa2022-17/
	https://bugzilla.mozilla.org/show_bug.cgi?id=1761981

Impacted products

Vendor

Product

Version

▼

Mozilla

Thunderbird

Version: unspecified < 91.9

	Mozilla	Firefox ESR	Version: unspecified < 91.9
	Mozilla	Firefox	Version: unspecified < 100

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T06:33:43.062Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-16/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-18/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-17/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1761981",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "NONE",
                     baseScore: 6.1,
                     baseSeverity: "MEDIUM",
                     confidentialityImpact: "LOW",
                     integrityImpact: "LOW",
                     privilegesRequired: "NONE",
                     scope: "CHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2022-29911",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-04-16T13:58:31.108896Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-1021",
                        description: "CWE-1021 Improper Restriction of Rendered UI Layers or Frames",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-04-16T13:58:35.577Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "91.9",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox ESR",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "91.9",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "100",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user-activation</code> could lead to script execution without <code>allow-scripts</code> being present. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "iframe Sandbox bypass",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-12-22T00:00:00.000Z",
            orgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
            shortName: "mozilla",
         },
         references: [
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-16/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-18/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-17/",
            },
            {
               url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1761981",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
      assignerShortName: "mozilla",
      cveId: "CVE-2022-29911",
      datePublished: "2022-12-22T00:00:00.000Z",
      dateReserved: "2022-04-29T00:00:00.000Z",
      dateUpdated: "2025-04-16T13:58:35.577Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-29917

Vulnerability from cvelistv5

Published

2022-12-22 00:00

Modified

2025-04-15 15:06

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

References

▼	URL	Tags
	https://www.mozilla.org/security/advisories/mfsa2022-16/
	https://www.mozilla.org/security/advisories/mfsa2022-18/
	https://www.mozilla.org/security/advisories/mfsa2022-17/
	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1684739%2C1706441%2C1753298%2C1762614%2C1762620%2C1764778

Impacted products

Vendor

Product

Version

▼

Mozilla

Thunderbird

Version: unspecified < 91.9

	Mozilla	Firefox ESR	Version: unspecified < 91.9
	Mozilla	Firefox	Version: unspecified < 100

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T06:33:43.055Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-16/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-18/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-17/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1684739%2C1706441%2C1753298%2C1762614%2C1762620%2C1764778",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "HIGH",
                     baseScore: 9.8,
                     baseSeverity: "CRITICAL",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2022-29917",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-04-15T15:06:01.037035Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-787",
                        description: "CWE-787 Out-of-bounds Write",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-04-15T15:06:32.473Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "91.9",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox ESR",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "91.9",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "100",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-12-22T00:00:00.000Z",
            orgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
            shortName: "mozilla",
         },
         references: [
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-16/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-18/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-17/",
            },
            {
               url: "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1684739%2C1706441%2C1753298%2C1762614%2C1762620%2C1764778",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
      assignerShortName: "mozilla",
      cveId: "CVE-2022-29917",
      datePublished: "2022-12-22T00:00:00.000Z",
      dateReserved: "2022-04-29T00:00:00.000Z",
      dateUpdated: "2025-04-15T15:06:32.473Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-29912

Vulnerability from cvelistv5

Published

2022-12-22 00:00

Modified

2025-04-15 20:05

Severity ?

6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Summary

Requests initiated through reader mode did not properly omit cookies with a SameSite attribute. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

References

▼	URL	Tags
	https://www.mozilla.org/security/advisories/mfsa2022-16/
	https://www.mozilla.org/security/advisories/mfsa2022-18/
	https://www.mozilla.org/security/advisories/mfsa2022-17/
	https://bugzilla.mozilla.org/show_bug.cgi?id=1692655

Impacted products

Vendor

Product

Version

▼

Mozilla

Thunderbird

Version: unspecified < 91.9

	Mozilla	Firefox ESR	Version: unspecified < 91.9
	Mozilla	Firefox	Version: unspecified < 100

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T06:33:43.107Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-16/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-18/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.mozilla.org/security/advisories/mfsa2022-17/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1692655",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "NONE",
                     baseScore: 6.1,
                     baseSeverity: "MEDIUM",
                     confidentialityImpact: "LOW",
                     integrityImpact: "LOW",
                     privilegesRequired: "NONE",
                     scope: "CHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2022-29912",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-04-15T20:01:23.487223Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-601",
                        description: "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-04-15T20:05:41.479Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "91.9",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox ESR",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "91.9",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "100",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Requests initiated through reader mode did not properly omit cookies with a SameSite attribute. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Reader mode bypassed SameSite cookies",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-12-22T00:00:00.000Z",
            orgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
            shortName: "mozilla",
         },
         references: [
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-16/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-18/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2022-17/",
            },
            {
               url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1692655",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
      assignerShortName: "mozilla",
      cveId: "CVE-2022-29912",
      datePublished: "2022-12-22T00:00:00.000Z",
      dateReserved: "2022-04-29T00:00:00.000Z",
      dateUpdated: "2025-04-15T20:05:41.479Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature