Every CVE Search/ Get API key

CVE-2019-15903

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...

7.5 HighFix available

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

6.64%Down 4.6 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

Record
CVE-2019-15903
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-125, CWE-776
Updated
2026-11-02
CVE List 6.5

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

Record
CVE-2019-15903
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2019-6813 6.5

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

Record
EUVD-2019-6813
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-w829-6hpw-frjf 7.5

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

Record
GHSA-w829-6hpw-frjf
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVALPINE-CVE-2019-15903 7.5

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

Record
ALPINE-CVE-2019-15903
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVBELL-CVE-2019-15903 7.5

CVE-2019-15903 does not affect BellSoft software

Record
BELL-CVE-2019-15903
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 42 moreShow less
OSV 7.5

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

Record
CVE-2019-15903
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-04
OSVDEBIAN-CVE-2019-15903 7.5

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

Record
DEBIAN-CVE-2019-15903
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVJLSEC-2025-41 7.5

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to...

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

Record
JLSEC-2025-41
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSVRHSA-2019:3193 8.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2019:3193
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:3196 8.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2019:3196
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:3210 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2019:3210
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:3237 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2019:3237
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:3756 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2019:3756
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:2644 7.5

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update

Record
RHSA-2020:2644
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2020:3952 7.5

Red Hat Security Advisory: expat security update

Record
RHSA-2020:3952
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2020:4484 7.5

Red Hat Security Advisory: expat security update

Record
RHSA-2020:4484
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:22871 9.8

Red Hat Security Advisory: expat security update

Record
RHSA-2025:22871
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2020:4484 7.5

Moderate: expat security update

Expat is a C library for parsing XML documents.

Security Fix(es):

  • expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843)

  • expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

Record
RLSA-2020:4484
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-15903 7.5

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

Record
UBUNTU-CVE-2019-15903
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1777304792 No score

expat: Fix of 3 CVEs

  • CVE-2017-9233: Fix external entity infinite loop bug
  • CVE-2018-20843: Fix extraction of namespace prefix from XML name
  • CVE-2019-15903: Deny internal entities closing the doctype (heap overread)
Record
CLSA-2026-1777304792
Updated
2026-11-02
OSVCLSA-2026-1777305047 No score

expat: Fix of 3 CVEs

  • CVE-2017-9233: Fix external entity infinite loop bug
  • CVE-2018-20843: Fix extraction of namespace prefix from XML name
  • CVE-2019-15903: Deny internal entities closing the doctype (heap overread)
Record
CLSA-2026-1777305047
Updated
2026-11-02
OSVMGASA-2019-0315 No score

Updated firefox packages fix security vulnerabilities

The updated packages fix several bugs and some security issues:

Use-after-free when creating index updates in IndexedDB. (CVE-2019-11757)

Potentially exploitable crash due to 360 Total Security. (CVE-2019-11758)

Stack buffer overflow in HKDF output. (CVE-2019-11759)

Stack buffer overflow in WebRTC networking. (CVE-2019-11760)

Unintended access to a privileged JSONView object. (CVE-2019-11761)

document.domain-based origin isolation has same-origin-property violation. (CVE-2019-11762)

Incorrect HTML parsing results in XSS bypass technique. (CVE-2019-11763)

Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2. (CVE-2019-11764)

Heap overflow in expat library in XML_GetCurrentLineNumber. (CVE-2019-15903)

Record
MGASA-2019-0315
Updated
2026-11-02
OSVMGASA-2019-0316 No score

Updated thunderbird packages fix security vulnerabilities

The updated packages fix security issues:

Use-after-free when creating index updates in IndexedDB. (CVE-2019-11757)

Potentially exploitable crash due to 360 Total Security. (CVE-2019-11758)

Stack buffer overflow in HKDF output. (CVE-2019-11759)

Stack buffer overflow in WebRTC networking. (CVE-2019-11760)

Unintended access to a privileged JSONView object. (CVE-2019-11761)

document.domain-based origin isolation has same-origin-property violation. (CVE-2019-11762)

Incorrect HTML parsing results in XSS bypass technique. (CVE-2019-11763)

Memory safety bugs fixed in Thunderbird 68.2. (CVE-2019-11764)

Heap overflow in expat library in XML_GetCurrentLineNumber. (CVE-2019-15903)

Enigmail has been updated to 2.1.3.

Record
MGASA-2019-0316
Updated
2026-11-02
OSVMGASA-2019-0321 No score

Updated expat packages fix security vulnerability

It was discovered that Expat did not properly handle internal entities closing the doctype, potentially resulting in denial of service or information disclosure if a malformed XML file is processed (CVE-2019-15903).

Record
MGASA-2019-0321
Updated
2026-11-02
OSVopenSUSE-SU-2019:2204-1 No score

Security update for expat

This update for expat fixes the following issues:

Security issues fixed:

  • CVE-2019-15903: Fixed heap-based buffer over-read caused by crafted XML input. (bsc#1149429)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2204-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2205-1 No score

Security update for expat

This update for expat fixes the following issues:

Security issues fixed:

  • CVE-2019-15903: Fixed heap-based buffer over-read caused by crafted XML input. (bsc#1149429)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2205-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2420-1 No score

Security update for chromium, re2

This update for chromium, re2 fixes the following issues:

Chromium was updated to 78.0.3904.70 boo#1154806:

  • CVE-2019-13699: Use-after-free in media
  • CVE-2019-13700: Buffer overrun in Blink
  • CVE-2019-13701: URL spoof in navigation
  • CVE-2019-13702: Privilege elevation in Installer
  • CVE-2019-13703: URL bar spoofing
  • CVE-2019-13704: CSP bypass
  • CVE-2019-13705: Extension permission bypass
  • CVE-2019-13706: Out-of-bounds read in PDFium
  • CVE-2019-13707: File storage disclosure
  • CVE-2019-13708: HTTP authentication spoof
  • CVE-2019-13709: File download protection bypass
  • CVE-2019-13710: File download protection bypass
  • CVE-2019-13711: Cross-context information leak
  • CVE-2019-15903: Buffer overflow in expat
  • CVE-2019-13713: Cross-origin data leak
  • CVE-2019-13714: CSS injection
  • CVE-2019-13715: Address bar spoofing
  • CVE-2019-13716: Service worker state error
  • CVE-2019-13717: Notification obscured
  • CVE-2019-13718: IDN spoof
  • CVE-2019-13719: Notification obscured
  • Various fixes from internal audits, fuzzing and other initiatives
  • Use internal resources for icon and appdata
Record
openSUSE-SU-2019:2420-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2424-1 No score

Security update for chromium, re2

This update for chromium, re2 fixes the following issues:

Chromium was updated to 78.0.3904.70 boo#1154806:

  • CVE-2019-13699: Use-after-free in media
  • CVE-2019-13700: Buffer overrun in Blink
  • CVE-2019-13701: URL spoof in navigation
  • CVE-2019-13702: Privilege elevation in Installer
  • CVE-2019-13703: URL bar spoofing
  • CVE-2019-13704: CSP bypass
  • CVE-2019-13705: Extension permission bypass
  • CVE-2019-13706: Out-of-bounds read in PDFium
  • CVE-2019-13707: File storage disclosure
  • CVE-2019-13708: HTTP authentication spoof
  • CVE-2019-13709: File download protection bypass
  • CVE-2019-13710: File download protection bypass
  • CVE-2019-13711: Cross-context information leak
  • CVE-2019-15903: Buffer overflow in expat
  • CVE-2019-13713: Cross-origin data leak
  • CVE-2019-13714: CSS injection
  • CVE-2019-13715: Address bar spoofing
  • CVE-2019-13716: Service worker state error
  • CVE-2019-13717: Notification obscured
  • CVE-2019-13718: IDN spoof
  • CVE-2019-13719: Notification obscured
  • Various fixes from internal audits, fuzzing and other initiatives
  • Use internal resources for icon and appdata

This update was imported from the openSUSE:Leap:15.0:Update update project.

Record
openSUSE-SU-2019:2424-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2425-1 No score

Security update for chromium, re2

This update for chromium, re2 fixes the following issues:

Chromium was updated to 78.0.3904.70 boo#1154806:

  • CVE-2019-13699: Use-after-free in media
  • CVE-2019-13700: Buffer overrun in Blink
  • CVE-2019-13701: URL spoof in navigation
  • CVE-2019-13702: Privilege elevation in Installer
  • CVE-2019-13703: URL bar spoofing
  • CVE-2019-13704: CSP bypass
  • CVE-2019-13705: Extension permission bypass
  • CVE-2019-13706: Out-of-bounds read in PDFium
  • CVE-2019-13707: File storage disclosure
  • CVE-2019-13708: HTTP authentication spoof
  • CVE-2019-13709: File download protection bypass
  • CVE-2019-13710: File download protection bypass
  • CVE-2019-13711: Cross-context information leak
  • CVE-2019-15903: Buffer overflow in expat
  • CVE-2019-13713: Cross-origin data leak
  • CVE-2019-13714: CSS injection
  • CVE-2019-13715: Address bar spoofing
  • CVE-2019-13716: Service worker state error
  • CVE-2019-13717: Notification obscured
  • CVE-2019-13718: IDN spoof
  • CVE-2019-13719: Notification obscured
  • Various fixes from internal audits, fuzzing and other initiatives
  • Use internal resources for icon and appdata

This update was imported from the openSUSE:Leap:15.1:Update update project.

Record
openSUSE-SU-2019:2425-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2447-1 No score

Security update for chromium

This update for chromium fixes the following issues:

Chromium was updated to 78.0.3904.87: (boo#1155643,boo#1154806,boo#1153660, boo#1151229,boo#1149143,boo#1145242,boo#1143492)

Security issues fixed with this version update:

  • CVE-2019-13721: Use-after-free in PDFium
  • CVE-2019-13720: Use-after-free in audio
  • CVE-2019-13699: Use-after-free in media
  • CVE-2019-13700: Buffer overrun in Blink
  • CVE-2019-13701: URL spoof in navigation
  • CVE-2019-13702: Privilege elevation in Installer
  • CVE-2019-13703: URL bar spoofing
  • CVE-2019-13704: CSP bypass
  • CVE-2019-13705: Extension permission bypass
  • CVE-2019-13706: Out-of-bounds read in PDFium
  • CVE-2019-13707: File storage disclosure
  • CVE-2019-13708: HTTP authentication spoof
  • CVE-2019-13709: File download protection bypass
  • CVE-2019-13710: File download protection bypass
  • CVE-2019-13711: Cross-context information leak
  • CVE-2019-15903: Buffer overflow in expat
  • CVE-2019-13713: Cross-origin data leak
  • CVE-2019-13714: CSS injection
  • CVE-2019-13715: Address bar spoofing
  • CVE-2019-13716: Service worker state error
  • CVE-2019-13717: Notification obscured
  • CVE-2019-13718: IDN spoof
  • CVE-2019-13719: Notification obscured
  • CVE-2019-13693: Use-after-free in IndexedDB
  • CVE-2019-13694: Use-after-free in WebRTC
  • CVE-2019-13695: Use-after-free in audio
  • CVE-2019-13696: Use-after-free in V8
  • CVE-2019-13697: Cross-origin size leak.
  • CVE-2019-13685: Use-after-free in UI
  • CVE-2019-13688: Use-after-free in media
  • CVE-2019-13687: Use-after-free in media
  • CVE-2019-13686: Use-after-free in offline pages
  • CVE-2019-5870: Use-after-free in media
  • CVE-2019-5871: Heap overflow in Skia
  • CVE-2019-5872: Use-after-free in Mojo
  • CVE-2019-5874: External URIs may trigger other browsers
  • CVE-2019-5875: URL bar spoof via download redirect
  • CVE-2019-5876: Use-after-free in media
  • CVE-2019-5877: Out-of-bounds access in V8
  • CVE-2019-5878: Use-after-free in V8
  • CVE-2019-5879: Extension can bypass same origin policy
  • CVE-2019-5880: SameSite cookie bypass
  • CVE-2019-5881: Arbitrary read in SwiftShader
  • CVE-2019-13659: URL spoof
  • CVE-2019-13660: Full screen notification overlap
  • CVE-2019-13661: Full screen notification spoof
  • CVE-2019-13662: CSP bypass
  • CVE-2019-13663: IDN spoof
  • CVE-2019-13664: CSRF bypass
  • CVE-2019-13665: Multiple file download protection bypass
  • CVE-2019-13666: Side channel using storage size estimate
  • CVE-2019-13667: URI bar spoof when using external app URIs
  • CVE-2019-13668: Global window leak via console
  • CVE-2019-13669: HTTP authentication spoof
  • CVE-2019-13670: V8 memory corruption in regex
  • CVE-2019-13671: Dialog box fails to show origin
  • CVE-2019-13673: Cross-origin information leak using devtools
  • CVE-2019-13674: IDN spoofing
  • CVE-2019-13675: Extensions can be disabled by trailing slash
  • CVE-2019-13676: Google URI shown for certificate warning
  • CVE-2019-13677: Chrome web store origin needs to be isolated
  • CVE-2019-13678: Download dialog spoofing
  • CVE-2019-13679: User gesture needed for printing
  • CVE-2019-13680: IP address spoofing to servers
  • CVE-2019-13681: Bypass on download restrictions
  • CVE-2019-13682: Site isolation bypass
  • CVE-2019-13683: Exceptions leaked by devtools
  • CVE-2019-5869: Use-after-free in Blink
  • CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  • CVE-2019-5867: Out-of-bounds read in V8
  • CVE-2019-5850: Use-after-free in offline page fetcher
  • CVE-2019-5860: Use-after-free in PDFium
  • CVE-2019-5853: Memory corruption in regexp length check
  • CVE-2019-5851: Use-after-poison in offline audio context
  • CVE-2019-5859: res: URIs can load alternative browsers
  • CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  • CVE-2019-5855: Integer overflow in PDFium
  • CVE-2019-5865: Site isolation bypass from compromised renderer
  • CVE-2019-5858:…
Record
openSUSE-SU-2019:2447-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2451-1 No score

Security update for MozillaFirefox, MozillaFirefox-branding-SLE

This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues:

Changes in MozillaFirefox:

Security issues fixed:

  • CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429).
  • CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB (bsc#1154738).
  • CVE-2019-11758: Fixed a potentially exploitable crash due to 360 Total Security (bsc#1154738).
  • CVE-2019-11759: Fixed a stack buffer overflow in HKDF output (bsc#1154738).
  • CVE-2019-11760: Fixed a stack buffer overflow in WebRTC networking (bsc#1154738).
  • CVE-2019-11761: Fixed an unintended access to a privileged JSONView object (bsc#1154738).
  • CVE-2019-11762: Fixed a same-origin-property violation (bsc#1154738).
  • CVE-2019-11763: Fixed an XSS bypass (bsc#1154738).
  • CVE-2019-11764: Fixed several memory safety bugs (bsc#1154738).

Non-security issues fixed:

  • Added Provides-line for translations-common (bsc#1153423) .
  • Moved some settings from branding-package here (bsc#1153869).
  • Disabled DoH by default.

Changes in MozillaFirefox-branding-SLE:

  • Moved extensions preferences to core package (bsc#1153869).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2451-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2452-1 No score

Recommended update for MozillaThunderbird

This update for MozillaThunderbird to version 68.2.1 provides the following fixes:

  • Security issues fixed (bsc#1154738):
    • CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429).
    • CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB (bsc#1154738).
    • CVE-2019-11758: Fixed a potentially exploitable crash due to 360 Total Security (bsc#1154738).
    • CVE-2019-11759: Fixed a stack buffer overflow in HKDF output (bsc#1154738).
    • CVE-2019-11760: Fixed a stack buffer overflow in WebRTC networking (bsc#1154738).
    • CVE-2019-11761: Fixed an unintended access to a privileged JSONView object (bsc#1154738).
    • CVE-2019-11762: Fixed a same-origin-property violation (bsc#1154738).
    • CVE-2019-11763: Fixed an XSS bypass (bsc#1154738).
    • CVE-2019-11764: Fixed several memory safety bugs (bsc#1154738).

Other fixes (bsc#1153879):

  • Some attachments couldn't be opened in messages originating from MS Outlook 2016.
  • Address book import from CSV.
  • Performance problem in message body search.
  • Ctrl+Enter to send a message would open an attachment if the attachment pane had focus.
  • Calendar: Issues with 'Today Pane' start-up.
  • Calendar: Glitches with custom repeat and reminder number input.
  • Calendar: Problems with WCAP provider.
  • A language for the user interface can now be chosen in the advanced settings
  • Fixed an issue with Google authentication (OAuth2)
  • Fixed an issue where selected or unread messages were not shown in the correct color in the thread pane under some circumstances
  • Fixed an issue where when using a language pack, names of standard folders were not localized (bsc#1149126)
  • Fixed an issue where the address book default startup directory in preferences panel not persisted
  • Fixed various visual glitches
  • Fixed issues with the chat
  • Fixed building with rust >= 1.38.
  • Fixrd LTO build without PGO.
  • Removed kde.js since disabling instantApply breaks extensions and is now obsolete with the move to HTML views for preferences. (bsc#1151186)
  • Updated create-tar.sh. (bsc#1152778)
  • Deactivated the crashreporter for the last remaining arch.

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2452-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2459-1 No score

Security update for MozillaFirefox, MozillaFirefox-branding-SLE

This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues:

Changes in MozillaFirefox:

Security issues fixed:

  • CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429).
  • CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB (bsc#1154738).
  • CVE-2019-11758: Fixed a potentially exploitable crash due to 360 Total Security (bsc#1154738).
  • CVE-2019-11759: Fixed a stack buffer overflow in HKDF output (bsc#1154738).
  • CVE-2019-11760: Fixed a stack buffer overflow in WebRTC networking (bsc#1154738).
  • CVE-2019-11761: Fixed an unintended access to a privileged JSONView object (bsc#1154738).
  • CVE-2019-11762: Fixed a same-origin-property violation (bsc#1154738).
  • CVE-2019-11763: Fixed an XSS bypass (bsc#1154738).
  • CVE-2019-11764: Fixed several memory safety bugs (bsc#1154738).

Non-security issues fixed:

  • Added Provides-line for translations-common (bsc#1153423) .
  • Moved some settings from branding-package here (bsc#1153869).
  • Disabled DoH by default.

Changes in MozillaFirefox-branding-SLE:

  • Moved extensions preferences to core package (bsc#1153869).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2459-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2464-1 No score

Recommended update for MozillaThunderbird

This update for MozillaThunderbird to version 68.2.1 provides the following fixes:

  • Security issues fixed (bsc#1154738):
    • CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429).
    • CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB (bsc#1154738).
    • CVE-2019-11758: Fixed a potentially exploitable crash due to 360 Total Security (bsc#1154738).
    • CVE-2019-11759: Fixed a stack buffer overflow in HKDF output (bsc#1154738).
    • CVE-2019-11760: Fixed a stack buffer overflow in WebRTC networking (bsc#1154738).
    • CVE-2019-11761: Fixed an unintended access to a privileged JSONView object (bsc#1154738).
    • CVE-2019-11762: Fixed a same-origin-property violation (bsc#1154738).
    • CVE-2019-11763: Fixed an XSS bypass (bsc#1154738).
    • CVE-2019-11764: Fixed several memory safety bugs (bsc#1154738).

Other fixes (bsc#1153879):

  • Some attachments couldn't be opened in messages originating from MS Outlook 2016.
  • Address book import from CSV.
  • Performance problem in message body search.
  • Ctrl+Enter to send a message would open an attachment if the attachment pane had focus.
  • Calendar: Issues with 'Today Pane' start-up.
  • Calendar: Glitches with custom repeat and reminder number input.
  • Calendar: Problems with WCAP provider.
  • A language for the user interface can now be chosen in the advanced settings
  • Fixed an issue with Google authentication (OAuth2)
  • Fixed an issue where selected or unread messages were not shown in the correct color in the thread pane under some circumstances
  • Fixed an issue where when using a language pack, names of standard folders were not localized (bsc#1149126)
  • Fixed an issue where the address book default startup directory in preferences panel not persisted
  • Fixed various visual glitches
  • Fixed issues with the chat
  • Fixed building with rust >= 1.38.
  • Fixrd LTO build without PGO.
  • Removed kde.js since disabling instantApply breaks extensions and is now obsolete with the move to HTML views for preferences. (bsc#1151186)
  • Updated create-tar.sh. (bsc#1152778)
  • Deactivated the crashreporter for the last remaining arch.

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2464-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:0010-1 No score

Security update for chromium, re2

This update for chromium, re2 fixes the following issues:

Chromium was updated to 78.0.3904.70 boo#1154806:

  • CVE-2019-13699: Use-after-free in media
  • CVE-2019-13700: Buffer overrun in Blink
  • CVE-2019-13701: URL spoof in navigation
  • CVE-2019-13702: Privilege elevation in Installer
  • CVE-2019-13703: URL bar spoofing
  • CVE-2019-13704: CSP bypass
  • CVE-2019-13705: Extension permission bypass
  • CVE-2019-13706: Out-of-bounds read in PDFium
  • CVE-2019-13707: File storage disclosure
  • CVE-2019-13708: HTTP authentication spoof
  • CVE-2019-13709: File download protection bypass
  • CVE-2019-13710: File download protection bypass
  • CVE-2019-13711: Cross-context information leak
  • CVE-2019-15903: Buffer overflow in expat
  • CVE-2019-13713: Cross-origin data leak
  • CVE-2019-13714: CSS injection
  • CVE-2019-13715: Address bar spoofing
  • CVE-2019-13716: Service worker state error
  • CVE-2019-13717: Notification obscured
  • CVE-2019-13718: IDN spoof
  • CVE-2019-13719: Notification obscured
  • Various fixes from internal audits, fuzzing and other initiatives
  • Use internal resources for icon and appdata

This update was imported from the openSUSE:Leap:15.0:Update update project.

Record
openSUSE-SU-2020:0010-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:0086-1 No score

Security update for python3

This update for python3 to version 3.6.10 fixes the following issues:

  • CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507).
  • CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955).
  • CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:0086-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10600-1 No score

MozillaFirefox-92.0-1.2 on GA media

These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10600-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10601-1 No score

MozillaThunderbird-91.1.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-91.1.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10601-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10681-1 No score

chromedriver-93.0.4577.82-1.1 on GA media

These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10681-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10748-1 No score

expat-2.4.1-1.2 on GA media

These are all security issues fixed in the expat-2.4.1-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10748-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11284-1 No score

python36-3.6.15-1.1 on GA media

These are all security issues fixed in the python36-3.6.15-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11284-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score

ungoogled-chromium-113.0.5672.92-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12948-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02
OSVSUSE-SU-2019:14246-1 No score

Security update for Mozilla Firefox

This update contains the Mozilla Firefox ESR 68.2 release.

Mozilla Firefox was updated to ESR 68.2 release:

  • Enterprise: New administrative policies were added. More information and templates are available at the Policy Templates page.

  • Various security fixes: MFSA 2019-33 (bsc#1154738)

    • CVE-2019-15903: Heap overflow in expat library in XML_GetCurrentLineNumber
    • CVE-2019-11757: Use-after-free when creating index updates in IndexedDB
    • CVE-2019-11758: Potentially exploitable crash due to 360 Total Security
    • CVE-2019-11759: Stack buffer overflow in HKDF output
    • CVE-2019-11760: Stack buffer overflow in WebRTC networking
    • CVE-2019-11761: Unintended access to a privileged JSONView object
    • CVE-2019-11762: document.domain-based origin isolation has same-origin- property violation
    • CVE-2019-11763: Incorrect HTML parsing results in XSS bypass technique
    • CVE-2019-11764: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2

Other Issues resolved:

  • [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  • [bsc#1074235] MozillaFirefox: background tab crash reports sent inadvertently without user opt-in
  • [bsc#1043008] Firefox hangs randomly when browsing and scrolling
  • [bsc#1025108] Firefox stops loading page until mouse is moved
  • [bsc#905528] Firefox malfunctions due to broken omni.ja archives
Record
SUSE-SU-2019:14246-1
Updated
2026-11-02
OSVSUSE-SU-2019:2429-1 No score

Security update for expat

This update for expat fixes the following issues:

Security issues fixed:

  • CVE-2019-15903: Fixed heap-based buffer over-read caused by crafted XML input. (bsc#1149429)
Record
SUSE-SU-2019:2429-1
Updated
2026-11-02
OSVSUSE-SU-2019:2440-1 No score

Security update for expat

This update for expat fixes the following issues:

Security issue fixed:

  • CVE-2019-15903: Fixed a heap-based buffer over-read caused by crafted XML documents. (bsc#1149429)
Record
SUSE-SU-2019:2440-1
Updated
2026-11-02
OSVSUSE-SU-2019:2871-1 No score

Security update for MozillaFirefox, MozillaFirefox-branding-SLE

This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues:

Changes in MozillaFirefox:

Security issues fixed:

  • CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429).
  • CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB (bsc#1154738).
  • CVE-2019-11758: Fixed a potentially exploitable crash due to 360 Total Security (bsc#1154738).
  • CVE-2019-11759: Fixed a stack buffer overflow in HKDF output (bsc#1154738).
  • CVE-2019-11760: Fixed a stack buffer overflow in WebRTC networking (bsc#1154738).
  • CVE-2019-11761: Fixed an unintended access to a privileged JSONView object (bsc#1154738).
  • CVE-2019-11762: Fixed a same-origin-property violation (bsc#1154738).
  • CVE-2019-11763: Fixed an XSS bypass (bsc#1154738).
  • CVE-2019-11764: Fixed several memory safety bugs (bsc#1154738).

Non-security issues fixed:

  • Added Provides-line for translations-common (bsc#1153423) .
  • Moved some settings from branding-package here (bsc#1153869).
  • Disabled DoH by default.

Changes in MozillaFirefox-branding-SLE:

  • Moved extensions preferences to core package (bsc#1153869).
Record
SUSE-SU-2019:2871-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
expat
Alpine:v3.10
 before 2.2.7-r1
2.2.7-r1
expat
Alpine:v3.11
 before 2.2.7-r1
2.2.7-r1
expat
Alpine:v3.12
 before 2.2.7-r1
2.2.7-r1
expat
Alpine:v3.13
 before 2.2.7-r1
2.2.7-r1
expat
Alpine:v3.14
 before 2.2.7-r1
2.2.7-r1
expat
Alpine:v3.15
 before 2.2.7-r1
2.2.7-r1
expat
Alpine:v3.16
 before 2.2.7-r1
2.2.7-r1
expat
Alpine:v3.17
 before 2.2.7-r1
2.2.7-r1
expat
Alpine:v3.18
 before 2.2.7-r1
2.2.7-r1
expat
Alpine:v3.19
 before 2.2.7-r1
2.2.7-r1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
expat
Alpine:v3.20
 before 2.2.7-r1
2.2.7-r1
expat
Alpine:v3.21
 before 2.2.7-r1
2.2.7-r1
expat
Alpine:v3.22
 before 2.2.7-r1
2.2.7-r1
expat
Alpine:v3.23
 before 2.2.7-r1
2.2.7-r1
expat
Alpine:v3.24
 before 2.2.7-r1
2.2.7-r1
expat
Alpine:v3.7
 before 2.2.7-r1
2.2.7-r1
expat
Alpine:v3.8
 before 2.2.7-r1
2.2.7-r1
expat
Alpine:v3.9
 before 2.2.7-r1
2.2.7-r1
firefox
Alpine:v3.12
 before 70.0-r0
70.0-r0
firefox
Alpine:v3.13
 before 70.0-r0
70.0-r0
firefox
Alpine:v3.14
 before 70.0-r0
70.0-r0
firefox
Alpine:v3.15
 before 70.0-r0
70.0-r0
firefox
Alpine:v3.16
 before 70.0-r0
70.0-r0
firefox
Alpine:v3.17
 before 70.0-r0
70.0-r0
firefox
Alpine:v3.18
 before 70.0-r0
70.0-r0
firefox
Alpine:v3.19
 before 70.0-r0
70.0-r0
firefox
Alpine:v3.20
 before 70.0-r0
70.0-r0
firefox
Alpine:v3.21
 before 70.0-r0
70.0-r0
firefox
Alpine:v3.22
 before 70.0-r0
70.0-r0
firefox
Alpine:v3.23
 before 70.0-r0
70.0-r0
firefox-esr
Alpine:v3.11
 before 68.2.0-r0
68.2.0-r0
firefox-esr
Alpine:v3.12
 before 68.2.0-r0
68.2.0-r0
firefox-esr
Alpine:v3.13
 before 68.2.0-r0
68.2.0-r0
firefox-esr
Alpine:v3.14
 before 68.2.0-r0
68.2.0-r0
firefox-esr
Alpine:v3.15
 before 68.2.0-r0
68.2.0-r0
firefox-esr
Alpine:v3.16
 before 68.2.0-r0
68.2.0-r0
firefox-esr
Alpine:v3.17
 before 68.2.0-r0
68.2.0-r0
firefox-esr
Alpine:v3.18
 before 68.2.0-r0
68.2.0-r0
firefox-esr
Alpine:v3.19
 before 68.2.0-r0
68.2.0-r0
firefox-esr
Alpine:v3.20
 before 68.2.0-r0
68.2.0-r0
firefox-esr
Alpine:v3.21
 before 68.2.0-r0
68.2.0-r0
firefox-esr
Alpine:v3.22
 before 68.2.0-r0
68.2.0-r0
firefox-esr
Alpine:v3.23
 before 68.2.0-r0
68.2.0-r0
librewolf
Alpine:v3.21
 before 70.0-r0
70.0-r0
librewolf
Alpine:v3.22
 before 70.0-r0
70.0-r0
librewolf
Alpine:v3.23
 before 70.0-r0
70.0-r0
librewolf
Alpine:v3.24
 before 70.0-r0
70.0-r0
python2
Alpine:v3.10
 before 2.7.17-r0
2.7.17-r0
python2
Alpine:v3.11
 before 2.7.17-r0
2.7.17-r0
python2
Alpine:v3.12
 before 2.7.17-r0
2.7.17-r0
python2
Alpine:v3.13
 before 2.7.17-r0
2.7.17-r0
python2
Alpine:v3.14
 before 2.7.17-r0
2.7.17-r0
python2
Alpine:v3.15
 before 2.7.17-r0
2.7.17-r0
python2
Alpine:v3.9
 before 2.7.17-r0
2.7.17-r0
python2-tkinter
Alpine:v3.10
 before 2.7.17-r0
2.7.17-r0
python2-tkinter
Alpine:v3.11
 before 2.7.17-r0
2.7.17-r0
expat
TuxCare:CentOS:6
From an advisory covering 3 CVEs
 before 2.0.1-13.el6_8.tuxcare.els8
2.0.1-13.el6_8.tuxcare.els8
expat-devel
TuxCare:CentOS:6
From an advisory covering 3 CVEs
 before 2.0.1-13.el6_8.tuxcare.els8
2.0.1-13.el6_8.tuxcare.els8
expat
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 2.0.1-13.el6_8.tuxcare.els8
2.0.1-13.el6_8.tuxcare.els8
expat-devel
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 2.0.1-13.el6_8.tuxcare.els8
2.0.1-13.el6_8.tuxcare.els8
expat
Debian:12
 before 2.2.7-2
2.2.7-2
expat
Debian:13
 before 2.2.7-2
2.2.7-2
expat
Debian:14
 before 2.2.7-2
2.2.7-2
firefox-esr
Debian:12
 before 68.2.0esr-1
68.2.0esr-1
firefox-esr
Debian:13
 before 68.2.0esr-1
68.2.0esr-1
firefox-esr
Debian:14
 before 68.2.0esr-1
68.2.0esr-1
libxmltok
Debian:12
 All versions, plus listed versions
1.2-41.2-4.11.2-4.1~exp11.2-4.2
 None known
thunderbird
Debian:12
 before 1:68.2.1-1
1:68.2.1-1
thunderbird
Debian:13
 before 1:68.2.1-1
1:68.2.1-1
thunderbird
Debian:14
 before 1:68.2.1-1
1:68.2.1-1
expat
Debian:8
 before 2.1.0-6+deb8u6, plus listed versions
2.1.0-62.1.0-6+deb8u12.1.0-6+deb8u22.1.0-6+deb8u32.1.0-6+deb8u3~kbsd8u12.1.0-6+deb8u42.1.0-6+deb8u5
2.1.0-6+deb8u6
firefox-esr
Debian:8
From an advisory covering 8 CVEs
 before 68.2.0esr-1~deb8u1, plus listed versions
45.0.1esr-145.0.2esr-145.0esr-145.0esr-245.1.0esr-1
Show 45 moreShow less
45.1.1esr-145.2.0esr-145.2.0esr-1~deb7u145.2.0esr-1~deb8u145.3.0esr-145.3.0esr-1~deb7u145.3.0esr-1~deb8u145.3.0esr-245.4.0esr-145.4.0esr-1~deb7u145.4.0esr-1~deb7u245.4.0esr-1~deb8u145.4.0esr-1~deb8u245.4.0esr-245.5.0esr-145.5.0esr-1~deb8u145.5.1esr-145.5.1esr-1~deb7u145.5.1esr-1~deb8u145.6.0esr-145.6.0esr-1~deb7u145.6.0esr-1~deb8u145.7.0esr-145.7.0esr-1~deb7u145.7.0esr-1~deb8u145.7.0esr-245.7.0esr-345.7.0esr-445.8.0esr-145.8.0esr-1~deb7u145.8.0esr-1~deb8u145.9.0esr-145.9.0esr-1~deb7u145.9.0esr-1~deb8u152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-152.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u1
68.2.0esr-1~deb8u1
thunderbird
Debian:8
From an advisory covering 9 CVEs
 before 1:68.2.2-1~deb8u1, plus listed versions
1.5-41.5.0.2-11.5.0.2-21.5.0.2-31.5.0.4-1
Show 45 moreShow less
1.5.0.4-21.5.0.4-31.5.0.5-11.5.0.7-11.5.0.7-21:52.4.0-11:52.4.0-1~deb7u11:52.4.0-1~deb8u11:52.4.0-1~deb9u11:52.4.0-2~exp11:52.5.0-11:52.5.0-1~deb7u11:52.5.0-1~deb8u11:52.5.0-1~deb9u11:52.5.2-11:52.5.2-1~deb7u11:52.5.2-21:52.5.2-2~deb8u11:52.5.2-2~deb9u11:52.6.0-11:52.6.0-1+alpha.11:52.6.0-1+alpha.21:52.6.0-1~deb7u11:52.6.0-1~deb8u11:52.6.0-1~deb9u11:52.7.0-11:52.7.0-1~deb7u11:52.7.0-1~deb8u11:52.7.0-1~deb9u11:52.8.0-11:52.8.0-1~deb7u11:52.8.0-1~deb8u11:52.8.0-1~deb9u11:52.9.0-11:52.9.1-11:52.9.1-1~deb8u11:52.9.1-1~deb9u11:58.0~b3-11:60.0-11:60.0-21:60.0-2~deb9u11:60.0-31:60.0-3~deb9u11:60.0~b10-11:60.0~b2-1
1:68.2.2-1~deb8u1
expat
Debian:9
 before 2.2.0-2+deb9u3, plus listed versions
2.2.0-22.2.0-2+deb9u12.2.0-2+deb9u2
2.2.0-2+deb9u3
expat
Debian:10
 before 2.2.6-2+deb10u1, plus listed versions
2.2.6-2
2.2.6-2+deb10u1
firefox-esr
Debian:10
From an advisory covering 8 CVEs
 before 68.2.0esr-1~deb10u1, plus listed versions
60.7.2esr-160.8.0esr-160.8.0esr-1~deb10u160.8.0esr-1~deb8u160.8.0esr-1~deb9u1
Show 9 moreShow less
60.9.0esr-1~deb10u160.9.0esr-1~deb8u160.9.0esr-1~deb8u260.9.0esr-1~deb9u168.0.2esr-168.1.0esr-168.2.0esr-1~deb8u168.2.0esr-1~deb9u168.2.0esr-1~deb9u2
68.2.0esr-1~deb10u1
firefox-esr
Debian:9
From an advisory covering 8 CVEs
 before 68.2.0esr-1~deb9u2, plus listed versions
45.9.0esr-152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-1
Show 45 moreShow less
52.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u152.3.0esr-1~deb8u152.3.0esr-1~deb8u252.3.0esr-1~deb9u152.3.0esr-252.4.0esr-1~deb8u152.4.0esr-1~deb9u152.4.0esr-252.4.0esr-2~deb7u152.5.0esr-152.5.0esr-1~deb7u152.5.0esr-1~deb8u152.5.0esr-1~deb9u152.5.2esr-152.5.2esr-1~deb7u152.5.2esr-1~deb8u152.5.2esr-1~deb9u152.5.3esr-152.6.0esr-152.6.0esr-1~deb7u152.6.0esr-1~deb8u152.6.0esr-1~deb9u152.6.0esr-252.6.0esr-2+alpha.152.6.0esr-2+alpha.252.7.0esr-152.7.0esr-1~deb8u152.7.0esr-1~deb9u152.7.1esr-152.7.1esr-1~deb7u152.7.1esr-1~deb8u152.7.1esr-1~deb9u152.7.2esr-152.7.2esr-1~deb7u152.7.2esr-1~deb8u152.7.2esr-1~deb9u152.7.3esr-152.7.3esr-1~deb7u152.7.3esr-1~deb8u1
68.2.0esr-1~deb9u2
thunderbird
Debian:9
From an advisory covering 9 CVEs
 before 1:68.2.2-1~deb9u1, plus listed versions
1.5-41.5.0.2-11.5.0.2-21.5.0.2-31.5.0.4-1
Show 45 moreShow less
1.5.0.4-21.5.0.4-31.5.0.5-11.5.0.7-11.5.0.7-21:52.4.0-11:52.4.0-1~deb7u11:52.4.0-1~deb8u11:52.4.0-1~deb9u11:52.4.0-2~exp11:52.5.0-11:52.5.0-1~deb7u11:52.5.0-1~deb8u11:52.5.0-1~deb9u11:52.5.2-11:52.5.2-1~deb7u11:52.5.2-21:52.5.2-2~deb8u11:52.5.2-2~deb9u11:52.6.0-11:52.6.0-1+alpha.11:52.6.0-1+alpha.21:52.6.0-1~deb7u11:52.6.0-1~deb8u11:52.6.0-1~deb9u11:52.7.0-11:52.7.0-1~deb7u11:52.7.0-1~deb8u11:52.7.0-1~deb9u11:52.8.0-11:52.8.0-1~deb7u11:52.8.0-1~deb8u11:52.8.0-1~deb9u11:52.9.0-11:52.9.1-11:52.9.1-1~deb8u11:52.9.1-1~deb9u11:58.0~b3-11:60.0-11:60.0-21:60.0-2~deb9u11:60.0-31:60.0-3~deb9u11:60.0~b10-11:60.0~b2-1
1:68.2.2-1~deb9u1
thunderbird
Debian:10
From an advisory covering 9 CVEs
 before 1:68.2.2-1~deb10u1, plus listed versions
1:60.7.2-11:60.8.0-11:60.8.0-1~deb10u11:60.8.0-1~deb8u11:60.8.0-1~deb9u1
Show 14 moreShow less
1:60.8.0-21:60.9.0-11:60.9.0-1~deb10u11:60.9.0-1~deb8u11:60.9.0-1~deb9u11:65.0~b1-11:66.0~b1-11:67.0~b3-11:68.0~b1-11:68.1.1-1~exp11:68.1.2-1~exp11:68.2.1-11:68.2.2-1~deb8u11:68.2.2-1~deb9u1
1:68.2.2-1~deb10u1
Expat_jll
Julia
 before 2.2.10+0
2.2.10+0
firefox
Mageia:7
From an advisory covering 9 CVEs
 before 68.2.0-1.mga7
68.2.0-1.mga7
firefox-l10n
Mageia:7
From an advisory covering 9 CVEs
 before 68.2.0-1.mga7
68.2.0-1.mga7
nspr
Mageia:7
From an advisory covering 9 CVEs
 before 4.23-1.mga7
4.23-1.mga7
nss
Mageia:7
From an advisory covering 9 CVEs
 before 3.47.0-1.mga7
3.47.0-1.mga7
rootcerts
Mageia:7
From an advisory covering 9 CVEs
 before 20191011.00-1.mga7
20191011.00-1.mga7
thunderbird
Mageia:7
From an advisory covering 9 CVEs
 before 68.2.1-1.mga7
68.2.1-1.mga7
thunderbird-l10n
Mageia:7
From an advisory covering 9 CVEs
 before 68.2.1-1.mga7
68.2.1-1.mga7
expat
Mageia:7
 before 2.2.7-1.1.mga7
2.2.7-1.1.mga7
firefox
Red Hat:enterprise_linux:7::client
From an advisory covering 9 CVEs
 before 0:68.2.0-1.el7_7
0:68.2.0-1.el7_7
firefox-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 9 CVEs
 before 0:68.2.0-1.el7_7
0:68.2.0-1.el7_7
firefox
Red Hat:enterprise_linux:7::server
From an advisory covering 9 CVEs
 before 0:68.2.0-1.el7_7
0:68.2.0-1.el7_7
firefox-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 9 CVEs
 before 0:68.2.0-1.el7_7
0:68.2.0-1.el7_7
firefox
Red Hat:enterprise_linux:7::workstation
From an advisory covering 9 CVEs
 before 0:68.2.0-1.el7_7
0:68.2.0-1.el7_7
firefox-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 9 CVEs
 before 0:68.2.0-1.el7_7
0:68.2.0-1.el7_7
firefox
Red Hat:enterprise_linux:8::appstream
From an advisory covering 9 CVEs
 before 0:68.2.0-2.el8_0
0:68.2.0-2.el8_0
firefox-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 9 CVEs
 before 0:68.2.0-2.el8_0
0:68.2.0-2.el8_0
firefox-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 9 CVEs
 before 0:68.2.0-2.el8_0
0:68.2.0-2.el8_0
thunderbird
Red Hat:enterprise_linux:7::client
From an advisory covering 9 CVEs
 before 0:68.2.0-1.el7_7
0:68.2.0-1.el7_7
thunderbird-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 9 CVEs
 before 0:68.2.0-1.el7_7
0:68.2.0-1.el7_7
thunderbird
Red Hat:enterprise_linux:7::server
From an advisory covering 9 CVEs
 before 0:68.2.0-1.el7_7
0:68.2.0-1.el7_7
thunderbird-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 9 CVEs
 before 0:68.2.0-1.el7_7
0:68.2.0-1.el7_7
thunderbird
Red Hat:enterprise_linux:7::workstation
From an advisory covering 9 CVEs
 before 0:68.2.0-1.el7_7
0:68.2.0-1.el7_7
thunderbird-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 9 CVEs
 before 0:68.2.0-1.el7_7
0:68.2.0-1.el7_7
thunderbird
Red Hat:enterprise_linux:8::appstream
From an advisory covering 9 CVEs
 before 0:68.2.0-1.el8_0
0:68.2.0-1.el8_0
thunderbird-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 9 CVEs
 before 0:68.2.0-1.el8_0
0:68.2.0-1.el8_0
thunderbird-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 9 CVEs
 before 0:68.2.0-1.el8_0
0:68.2.0-1.el8_0
thunderbird
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
 before 0:68.2.0-2.el6_10
0:68.2.0-2.el6_10
thunderbird-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
 before 0:68.2.0-2.el6_10
0:68.2.0-2.el6_10
thunderbird
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
 before 0:68.2.0-2.el6_10
0:68.2.0-2.el6_10
thunderbird-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
 before 0:68.2.0-2.el6_10
0:68.2.0-2.el6_10
thunderbird
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
 before 0:68.2.0-2.el6_10
0:68.2.0-2.el6_10
thunderbird-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
 before 0:68.2.0-2.el6_10
0:68.2.0-2.el6_10
jbcs-httpd24-curl
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:7.64.1-36.jbcs.el6
0:7.64.1-36.jbcs.el6
jbcs-httpd24-curl-debuginfo
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:7.64.1-36.jbcs.el6
0:7.64.1-36.jbcs.el6
jbcs-httpd24-httpd
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:2.4.37-57.jbcs.el6
0:2.4.37-57.jbcs.el6
jbcs-httpd24-httpd-debuginfo
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:2.4.37-57.jbcs.el6
0:2.4.37-57.jbcs.el6
jbcs-httpd24-httpd-devel
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:2.4.37-57.jbcs.el6
0:2.4.37-57.jbcs.el6
jbcs-httpd24-httpd-manual
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:2.4.37-57.jbcs.el6
0:2.4.37-57.jbcs.el6
jbcs-httpd24-httpd-selinux
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:2.4.37-57.jbcs.el6
0:2.4.37-57.jbcs.el6
jbcs-httpd24-httpd-tools
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:2.4.37-57.jbcs.el6
0:2.4.37-57.jbcs.el6
jbcs-httpd24-libcurl
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:7.64.1-36.jbcs.el6
0:7.64.1-36.jbcs.el6
jbcs-httpd24-libcurl-devel
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:7.64.1-36.jbcs.el6
0:7.64.1-36.jbcs.el6
jbcs-httpd24-mod_cluster-native
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:1.3.14-4.Final_redhat_2.jbcs.el6
0:1.3.14-4.Final_redhat_2.jbcs.el6
jbcs-httpd24-mod_cluster-native-debuginfo
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:1.3.14-4.Final_redhat_2.jbcs.el6
0:1.3.14-4.Final_redhat_2.jbcs.el6
jbcs-httpd24-mod_http2
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:1.15.7-3.jbcs.el6
0:1.15.7-3.jbcs.el6
jbcs-httpd24-mod_http2-debuginfo
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:1.15.7-3.jbcs.el6
0:1.15.7-3.jbcs.el6
jbcs-httpd24-mod_jk
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:1.2.48-4.redhat_1.jbcs.el6
0:1.2.48-4.redhat_1.jbcs.el6
jbcs-httpd24-mod_jk-ap24
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:1.2.48-4.redhat_1.jbcs.el6
0:1.2.48-4.redhat_1.jbcs.el6
jbcs-httpd24-mod_jk-debuginfo
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:1.2.48-4.redhat_1.jbcs.el6
0:1.2.48-4.redhat_1.jbcs.el6
jbcs-httpd24-mod_jk-manual
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:1.2.48-4.redhat_1.jbcs.el6
0:1.2.48-4.redhat_1.jbcs.el6
jbcs-httpd24-mod_ldap
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:2.4.37-57.jbcs.el6
0:2.4.37-57.jbcs.el6
jbcs-httpd24-mod_md
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 1:2.0.8-24.jbcs.el6
1:2.0.8-24.jbcs.el6
jbcs-httpd24-mod_md-debuginfo
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 1:2.0.8-24.jbcs.el6
1:2.0.8-24.jbcs.el6
jbcs-httpd24-mod_proxy_html
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 1:2.4.37-57.jbcs.el6
1:2.4.37-57.jbcs.el6
jbcs-httpd24-mod_security
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:2.9.2-51.GA.jbcs.el6
0:2.9.2-51.GA.jbcs.el6
jbcs-httpd24-mod_security-debuginfo
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:2.9.2-51.GA.jbcs.el6
0:2.9.2-51.GA.jbcs.el6
jbcs-httpd24-mod_session
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:2.4.37-57.jbcs.el6
0:2.4.37-57.jbcs.el6
jbcs-httpd24-mod_ssl
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 1:2.4.37-57.jbcs.el6
1:2.4.37-57.jbcs.el6
jbcs-httpd24-nghttp2
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:1.39.2-25.jbcs.el6
0:1.39.2-25.jbcs.el6
jbcs-httpd24-nghttp2-debuginfo
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:1.39.2-25.jbcs.el6
0:1.39.2-25.jbcs.el6
jbcs-httpd24-nghttp2-devel
Red Hat:jboss_core_services:1::el6
From an advisory covering 9 CVEs
 before 0:1.39.2-25.jbcs.el6
0:1.39.2-25.jbcs.el6
jbcs-httpd24-curl
Red Hat:jboss_core_services:1::el7
From an advisory covering 9 CVEs
 before 0:7.64.1-36.jbcs.el7
0:7.64.1-36.jbcs.el7
jbcs-httpd24-curl-debuginfo
Red Hat:jboss_core_services:1::el7
From an advisory covering 9 CVEs
 before 0:7.64.1-36.jbcs.el7
0:7.64.1-36.jbcs.el7
jbcs-httpd24-httpd
Red Hat:jboss_core_services:1::el7
From an advisory covering 9 CVEs
 before 0:2.4.37-57.jbcs.el7
0:2.4.37-57.jbcs.el7
jbcs-httpd24-httpd-debuginfo
Red Hat:jboss_core_services:1::el7
From an advisory covering 9 CVEs
 before 0:2.4.37-57.jbcs.el7
0:2.4.37-57.jbcs.el7
jbcs-httpd24-httpd-devel
Red Hat:jboss_core_services:1::el7
From an advisory covering 9 CVEs
 before 0:2.4.37-57.jbcs.el7
0:2.4.37-57.jbcs.el7
jbcs-httpd24-httpd-manual
Red Hat:jboss_core_services:1::el7
From an advisory covering 9 CVEs
 before 0:2.4.37-57.jbcs.el7
0:2.4.37-57.jbcs.el7
jbcs-httpd24-httpd-selinux
Red Hat:jboss_core_services:1::el7
From an advisory covering 9 CVEs
 before 0:2.4.37-57.jbcs.el7
0:2.4.37-57.jbcs.el7
jbcs-httpd24-httpd-tools
Red Hat:jboss_core_services:1::el7
From an advisory covering 9 CVEs
 before 0:2.4.37-57.jbcs.el7
0:2.4.37-57.jbcs.el7
jbcs-httpd24-libcurl
Red Hat:jboss_core_services:1::el7
From an advisory covering 9 CVEs
 before 0:7.64.1-36.jbcs.el7
0:7.64.1-36.jbcs.el7
jbcs-httpd24-libcurl-devel
Red Hat:jboss_core_services:1::el7
From an advisory covering 9 CVEs
 before 0:7.64.1-36.jbcs.el7
0:7.64.1-36.jbcs.el7
expat
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.2.5-4.el8
0:2.2.5-4.el8
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 118 CVEs
 before 68.2.0-78.51.4
68.2.0-78.51.4
MozillaFirefox-branding-SLED
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 118 CVEs
 before 68-21.9.8
68-21.9.8
firefox-atk
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 118 CVEs
 before 2.26.1-2.8.4
2.26.1-2.8.4
firefox-cairo
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 118 CVEs
 before 1.15.10-2.13.4
1.15.10-2.13.4
firefox-gdk-pixbuf
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 118 CVEs
 before 2.36.11-2.8.4
2.36.11-2.8.4
firefox-glib2
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 118 CVEs
 before 2.54.3-2.14.7
2.54.3-2.14.7
firefox-gtk3
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 118 CVEs
 before 3.10.9-2.15.3
3.10.9-2.15.3
firefox-harfbuzz
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 118 CVEs
 before 1.7.5-2.7.4
1.7.5-2.7.4
firefox-libffi
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 118 CVEs
 before 3.2.1.git259-2.3.3
3.2.1.git259-2.3.3
firefox-libffi-gcc5
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 118 CVEs
 before 5.3.1+r233831-14.1
5.3.1+r233831-14.1
firefox-pango
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 118 CVEs
 before 1.40.14-2.7.4
1.40.14-2.7.4
mozilla-nspr
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 118 CVEs
 before 4.21-29.6.1
4.21-29.6.1
mozilla-nss
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 118 CVEs
 before 3.45-38.9.3
3.45-38.9.3
expat
SUSE:Linux Enterprise Module for Basesystem 15
 before 2.2.5-3.6.1
2.2.5-3.6.1
expat
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 2.2.5-3.6.1
2.2.5-3.6.1
expat
SUSE:Linux Enterprise Desktop 12 SP4
 before 2.1.0-21.9.1
2.1.0-21.9.1
expat
SUSE:Linux Enterprise Software Development Kit 12 SP4
 before 2.1.0-21.9.1
2.1.0-21.9.1
expat
SUSE:Linux Enterprise Server 12 SP4
 before 2.1.0-21.9.1
2.1.0-21.9.1
expat
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 2.1.0-21.9.1
2.1.0-21.9.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15
From an advisory covering 9 CVEs
 before 68.2.0-3.59.1
68.2.0-3.59.1
MozillaFirefox-branding-SLE
SUSE:Linux Enterprise Module for Desktop Applications 15
From an advisory covering 9 CVEs
 before 68-4.11.2
68-4.11.2
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
From an advisory covering 9 CVEs
 before 68.2.0-3.59.1
68.2.0-3.59.1
MozillaFirefox-branding-SLE
SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
From an advisory covering 9 CVEs
 before 68-4.11.2
68-4.11.2
MozillaFirefox
SUSE:HPE Helion OpenStack 8
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:OpenStack Cloud 7
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:OpenStack Cloud 8
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaFirefox
SUSE:Enterprise Storage 5
From an advisory covering 51 CVEs
 before 68.2.0-109.95.2
68.2.0-109.95.2
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15
From an advisory covering 9 CVEs
 before 68.2.1-3.58.1
68.2.1-3.58.1
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP1
From an advisory covering 9 CVEs
 before 68.2.1-3.58.1
68.2.1-3.58.1
python3
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 26 CVEs
 before 3.6.10-3.42.2
3.6.10-3.42.2
python3-base
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 26 CVEs
 before 3.6.10-3.42.2
3.6.10-3.42.2
python3
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 26 CVEs
 before 3.6.10-3.42.2
3.6.10-3.42.2
python3-base
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 26 CVEs
 before 3.6.10-3.42.2
3.6.10-3.42.2
python3-base
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 26 CVEs
 before 3.6.10-3.42.2
3.6.10-3.42.2
python3-base
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 26 CVEs
 before 3.6.10-3.42.2
3.6.10-3.42.2
python36
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 10 CVEs
 before 3.6.10-4.3.5
3.6.10-4.3.5
python36-base
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 10 CVEs
 before 3.6.10-4.3.5
3.6.10-4.3.5
python36
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 10 CVEs
 before 3.6.10-4.3.5
3.6.10-4.3.5
python36-base
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 10 CVEs
 before 3.6.10-4.3.5
3.6.10-4.3.5
expat
SUSE:Linux Micro 6.0
From an advisory covering 10 CVEs
 before 2.7.1-1.1
2.7.1-1.1
expat
SUSE:Linux Micro 6.1
From an advisory covering 10 CVEs
 before 2.7.1-slfo.1.1_1.1
2.7.1-slfo.1.1_1.1
expat
Ubuntu:Pro:14.04:LTS
 before 2.1.0-4ubuntu1.4+esm2, plus listed versions
2.1.0-42.1.0-4ubuntu12.1.0-4ubuntu1.12.1.0-4ubuntu1.22.1.0-4ubuntu1.32.1.0-4ubuntu1.42.1.0-4ubuntu1.4+esm1
2.1.0-4ubuntu1.4+esm2
vtk
Ubuntu:Pro:14.04:LTS
 before 5.8.0-14.1ubuntu3+esm1, plus listed versions
5.8.0-14ubuntu15.8.0-14ubuntu35.8.0-14.1ubuntu25.8.0-14.1ubuntu3
5.8.0-14.1ubuntu3+esm1
coin3
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.1.4~abc9f50-33.1.4~abc9f50-43.1.4~abc9f50-4ubuntu23.1.4~abc9f50-4ubuntu2+esm13.1.4~abc9f50-4ubuntu2+esm2
 None known
vnc4
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.1.1+xorg4.3.0-37ubuntu54.1.1+xorg4.3.0-37ubuntu5.0.14.1.1+xorg4.3.0-37ubuntu5.0.24.1.1+xorg4.3.0-37ubuntu5.0.2+esm1
 None known
xmlrpc-c
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.16.33-3.2ubuntu31.33.06-0ubuntu11.33.06-0ubuntu1+esm1
 None known
chromium-browser
Ubuntu:16.04:LTS
 before 78.0.3904.70-0ubuntu0.16.04.2, plus listed versions
45.0.2454.101-0ubuntu1.120147.0.2526.73-0ubuntu1.121847.0.2526.106-0ubuntu1.122148.0.2564.82-0ubuntu1.122248.0.2564.116-0ubuntu1.1229
Show 45 moreShow less
49.0.2623.87-0ubuntu1.123249.0.2623.108-0ubuntu1.123350.0.2661.102-0ubuntu0.16.04.1.123751.0.2704.79-0ubuntu0.16.04.1.124252.0.2743.116-0ubuntu0.16.04.1.125053.0.2785.143-0ubuntu0.16.04.1.125453.0.2785.143-0ubuntu0.16.04.1.125755.0.2883.87-0ubuntu0.16.04.126356.0.2924.76-0ubuntu0.16.04.126857.0.2987.98-0ubuntu0.16.04.127658.0.3029.81-0ubuntu0.16.04.127758.0.3029.96-0ubuntu0.16.04.127958.0.3029.110-0ubuntu0.16.04.128159.0.3071.109-0ubuntu0.16.04.128959.0.3071.109-0ubuntu0.16.04.129160.0.3112.78-0ubuntu0.16.04.129360.0.3112.113-0ubuntu0.16.04.129861.0.3163.79-0ubuntu0.16.04.130061.0.3163.100-0ubuntu0.16.04.130662.0.3202.62-0ubuntu0.16.04.130862.0.3202.75-0ubuntu0.16.04.131362.0.3202.89-0ubuntu0.16.04.131562.0.3202.94-0ubuntu0.16.04.131763.0.3239.84-0ubuntu0.16.04.163.0.3239.132-0ubuntu0.16.04.164.0.3282.119-0ubuntu0.16.04.164.0.3282.140-0ubuntu0.16.04.164.0.3282.167-0ubuntu0.16.04.165.0.3325.181-0ubuntu0.16.04.166.0.3359.139-0ubuntu0.16.04.366.0.3359.181-0ubuntu0.16.04.167.0.3396.99-0ubuntu0.16.04.268.0.3440.75-0ubuntu0.16.04.168.0.3440.106-0ubuntu0.16.04.169.0.3497.81-0ubuntu0.16.04.170.0.3538.67-0ubuntu0.16.04.170.0.3538.77-0ubuntu0.16.04.170.0.3538.110-0ubuntu0.16.04.171.0.3578.80-0ubuntu0.16.04.171.0.3578.98-0ubuntu0.16.04.172.0.3626.119-0ubuntu0.16.04.172.0.3626.121-0ubuntu0.16.04.173.0.3683.75-0ubuntu0.16.04.173.0.3683.86-0ubuntu0.16.04.174.0.3729.169-0ubuntu0.16.04.1
78.0.3904.70-0ubuntu0.16.04.2
expat
Ubuntu:16.04:LTS
 before 2.1.0-7ubuntu0.16.04.5, plus listed versions
2.1.0-72.1.0-7ubuntu0.16.04.12.1.0-7ubuntu0.16.04.22.1.0-7ubuntu0.16.04.32.1.0-7ubuntu0.16.04.4
2.1.0-7ubuntu0.16.04.5
firefox
Ubuntu:16.04:LTS
 before 70.0+build2-0ubuntu0.16.04.1, plus listed versions
41.0.2+build2-0ubuntu142.0+build2-0ubuntu144.0+build3-0ubuntu244.0.1+build1-0ubuntu144.0.2+build1-0ubuntu1
Show 45 moreShow less
45.0+build2-0ubuntu145.0.1+build1-0ubuntu145.0.2+build1-0ubuntu146.0+build5-0ubuntu0.16.04.246.0.1+build1-0ubuntu0.16.04.247.0+build3-0ubuntu0.16.04.148.0+build2-0ubuntu0.16.04.149.0+build4-0ubuntu0.16.04.149.0.2+build2-0ubuntu0.16.04.250.0+build2-0ubuntu0.16.04.250.0.2+build1-0ubuntu0.16.04.150.1.0+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.252.0+build2-0ubuntu0.16.04.152.0.1+build2-0ubuntu0.16.04.152.0.2+build1-0ubuntu0.16.04.153.0+build6-0ubuntu0.16.04.153.0.2+build1-0ubuntu0.16.04.253.0.3+build1-0ubuntu0.16.04.254.0+build3-0ubuntu0.16.04.155.0.1+build2-0ubuntu0.16.04.255.0.2+build1-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.257.0+build4-0ubuntu0.16.04.557.0+build4-0ubuntu0.16.04.657.0.1+build2-0ubuntu0.16.04.157.0.3+build1-0ubuntu0.16.04.157.0.4+build1-0ubuntu0.16.04.158.0+build6-0ubuntu0.16.04.158.0.1+build1-0ubuntu0.16.04.158.0.2+build1-0ubuntu0.16.04.159.0+build5-0ubuntu0.16.04.159.0.1+build1-0ubuntu0.16.04.159.0.2+build1-0ubuntu0.16.04.159.0.2+build1-0ubuntu0.16.04.360.0+build2-0ubuntu0.16.04.160.0.1+build2-0ubuntu0.16.04.160.0.2+build1-0ubuntu0.16.04.161.0+build3-0ubuntu0.16.04.261.0.1+build1-0ubuntu0.16.04.162.0+build2-0ubuntu0.16.04.362.0+build2-0ubuntu0.16.04.462.0+build2-0ubuntu0.16.04.5
70.0+build2-0ubuntu0.16.04.1
thunderbird
Ubuntu:16.04:LTS
 before 1:68.7.0+build1-0ubuntu0.16.04.2, plus listed versions
1:38.3.0+build1-0ubuntu21:38.5.1+build2-0ubuntu11:38.6.0+build1-0ubuntu11:38.7.2+build1-0ubuntu0.16.04.11:38.8.0+build1-0ubuntu0.16.04.1
Show 25 moreShow less
1:45.2.0+build1-0ubuntu0.16.04.11:45.3.0+build1-0ubuntu0.16.04.21:45.4.0+build1-0ubuntu0.16.04.11:45.5.1+build1-0ubuntu0.16.04.11:45.7.0+build1-0ubuntu0.16.04.11:45.8.0+build1-0ubuntu0.16.04.11:52.1.1+build1-0ubuntu0.16.04.11:52.2.1+build1-0ubuntu0.16.04.11:52.3.0+build1-0ubuntu0.16.04.11:52.4.0+build1-0ubuntu0.16.04.21:52.5.0+build1-0ubuntu0.16.04.11:52.6.0+build1-0ubuntu0.16.04.11:52.7.0+build1-0ubuntu0.16.04.11:52.8.0+build1-0ubuntu0.16.04.11:52.9.1+build3-0ubuntu0.16.04.11:60.2.1+build1-0ubuntu0.16.04.41:60.4.0+build2-0ubuntu0.16.04.11:60.5.1+build2-0ubuntu0.16.04.11:60.6.1+build2-0ubuntu0.16.04.11:60.7.0+build1-0ubuntu0.16.04.11:60.7.1+build1-0ubuntu0.16.04.11:60.7.2+build2-0ubuntu0.16.04.11:60.8.0+build1-0ubuntu0.16.04.21:60.9.0+build1-0ubuntu0.16.04.21:60.9.1+build1-0ubuntu0.16.04.1
1:68.7.0+build1-0ubuntu0.16.04.2
libxmltok
Ubuntu:Pro:16.04:LTS
 before 1.2-3ubuntu0.16.04.1~esm2, plus listed versions
1.2-3build31.2-3ubuntu0.16.04.1~esm1
1.2-3ubuntu0.16.04.1~esm2
vtk
Ubuntu:Pro:16.04:LTS
 before 5.10.1+dfsg-2.1ubuntu0.1~esm1, plus listed versions
5.10.1+dfsg-25.10.1+dfsg-2build35.10.1+dfsg-2.1build1
5.10.1+dfsg-2.1ubuntu0.1~esm1
ayttm
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.6.3-3build10.6.3-3ubuntu0.1~esm1
 None known
cableswig
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.1.0+git20150808-10.1.0+git20150808-20.1.0+git20150808-2ubuntu0.1~esm1
 None known
cadaver
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.23.3-2ubuntu2
 None known
coin3
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
3.1.4~abc9f50+dfsg1-13.1.4~abc9f50+dfsg1-1ubuntu0.1~esm13.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2
 None known
insighttoolkit
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
3.20.1+git20120521-63.20.1+git20120521-6build13.20.1+git20120521-6ubuntu0.1~esm1
 None known
insighttoolkit4
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.1-1ubuntu34.8.1-1ubuntu44.8.2-3.1ubuntu14.9.0-3ubuntu24.9.0-4ubuntu14.9.0-4ubuntu1.1
 None known
matanza
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.13+ds1-5
 None known
sitecopy
Ubuntu:16.04:LTS
 All versions, plus listed versions
1:0.16.6-7
 None known
swish-e
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2.4.7-42.4.7-4build12.4.7-4ubuntu0.1~esm1
 None known
tdom
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.8.3-1
 None known
vnc4
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.1.1+xorg4.3.0-37.3ubuntu24.1.1+xorg4.3.0-37.3ubuntu2.1+esm1
 None known
wbxml2
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.10.7-1
 None known
xmlrpc-c
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.33.14-0.2ubuntu31.33.14-1ubuntu11.33.14-1ubuntu1+esm1
 None known
chromium-browser
Ubuntu:18.04:LTS
 before 78.0.3904.70-0ubuntu0.18.04.2, plus listed versions
61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1
Show 27 moreShow less
63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.176.0.3809.87-0ubuntu0.18.04.176.0.3809.100-0ubuntu0.18.04.177.0.3865.90-0ubuntu0.18.04.1
78.0.3904.70-0ubuntu0.18.04.2
expat
Ubuntu:18.04:LTS
 before 2.2.5-3ubuntu0.2, plus listed versions
2.2.3-12.2.3-22.2.5-0ubuntu22.2.5-32.2.5-3ubuntu0.1
2.2.5-3ubuntu0.2
firefox
Ubuntu:18.04:LTS
 before 70.0+build2-0ubuntu0.18.04.1, plus listed versions
56.0+build6-0ubuntu157.0.1+build2-0ubuntu159.0.1+build1-0ubuntu159.0.2+build1-0ubuntu160.0+build2-0ubuntu1
Show 30 moreShow less
60.0.1+build2-0ubuntu0.18.04.160.0.2+build1-0ubuntu0.18.04.161.0+build3-0ubuntu0.18.04.161.0.1+build1-0ubuntu0.18.04.162.0+build2-0ubuntu0.18.04.362.0+build2-0ubuntu0.18.04.462.0+build2-0ubuntu0.18.04.562.0.3+build1-0ubuntu0.18.04.163.0+build2-0ubuntu0.18.04.263.0.3+build1-0ubuntu0.18.04.164.0+build3-0ubuntu0.18.04.165.0+build2-0ubuntu0.18.04.165.0.1+build2-0ubuntu0.18.04.166.0+build3-0ubuntu0.18.04.166.0.1+build1-0ubuntu0.18.04.166.0.2+build1-0ubuntu0.18.04.166.0.3+build1-0ubuntu0.18.04.166.0.4+build3-0ubuntu0.18.04.166.0.5+build1-0ubuntu0.18.04.167.0+build2-0ubuntu0.18.04.167.0.1+build1-0ubuntu0.18.04.167.0.2+build2-0ubuntu0.18.04.167.0.3+build1-0ubuntu0.18.04.167.0.4+build1-0ubuntu0.18.04.168.0+build3-0ubuntu0.18.04.168.0.1+build1-0ubuntu0.18.04.168.0.2+build1-0ubuntu0.18.04.169.0+build2-0ubuntu0.18.04.169.0.1+build1-0ubuntu0.18.04.169.0.2+build1-0ubuntu0.18.04.1
70.0+build2-0ubuntu0.18.04.1
thunderbird
Ubuntu:18.04:LTS
 before 1:68.2.1+build1-0ubuntu0.18.04.1, plus listed versions
1:52.4.0+build1-0ubuntu21:52.6.0+build1-0ubuntu11:52.7.0+build1-0ubuntu11:52.8.0+build1-0ubuntu0.18.04.11:52.9.1+build3-0ubuntu0.18.04.1
Show 9 moreShow less
1:60.2.1+build1-0ubuntu0.18.04.21:60.4.0+build2-0ubuntu0.18.04.11:60.5.1+build2-0ubuntu0.18.04.11:60.6.1+build2-0ubuntu0.18.04.11:60.7.0+build1-0ubuntu0.18.04.11:60.7.1+build1-0ubuntu0.18.04.11:60.7.2+build2-0ubuntu0.18.04.11:60.8.0+build1-0ubuntu0.18.04.11:60.9.0+build1-0ubuntu0.18.04.1
1:68.2.1+build1-0ubuntu0.18.04.1
cadaver
Ubuntu:18.04:LTS
 All versions, plus listed versions
0.23.3-2ubuntu3
 None known
coin3
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
3.1.4~abc9f50+dfsg1-23.1.4~abc9f50+dfsg2-13.1.4~abc9f50+dfsg3-13.1.4~abc9f50+dfsg3-23.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1
 None known
libxmltok
Ubuntu:Pro:18.04:LTS
 before 1.2-4ubuntu0.18.04.1~esm4, plus listed versions
1.2-41.2-4ubuntu0.18.04.1~esm11.2-4ubuntu0.18.04.1~esm21.2-4ubuntu0.18.04.1~esm3
1.2-4ubuntu0.18.04.1~esm4
matanza
Ubuntu:18.04:LTS
 All versions, plus listed versions
0.13+ds1-5build10.13+ds1-6
 None known
sitecopy
Ubuntu:18.04:LTS
 All versions, plus listed versions
1:0.16.6-71:0.16.6-7build1
 None known
swish-e
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.4.7-5ubuntu12.4.7-5ubuntu1+esm1
 None known
tdom
Ubuntu:18.04:LTS
 All versions, plus listed versions
0.8.3-10.9.0-1
 None known
vnc4
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.1.1+xorg4.3.0-37.3ubuntu2
 None known
wbxml2
Ubuntu:18.04:LTS
 All versions, plus listed versions
0.10.7-10.10.7-1build1
 None known
xmlrpc-c
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.33.14-71.33.14-81.33.14-8build11.33.14-8ubuntu0.18.04.1~esm1
 None known
chromium-browser
Ubuntu:20.04:LTS
 before 78.0.3904.70-0ubuntu1, plus listed versions
77.0.3865.120-0ubuntu1~snap177.0.3865.120-0ubuntu2
78.0.3904.70-0ubuntu1
firefox
Ubuntu:20.04:LTS
 before 70.0+build2-0ubuntu1, plus listed versions
69.0.3+build1-0ubuntu1
70.0+build2-0ubuntu1
cadaver
Ubuntu:20.04:LTS
 All versions, plus listed versions
0.23.3-2.1build1
 None known
libxmltok
Ubuntu:Pro:20.04:LTS
 before 1.2-4ubuntu0.20.04.1~esm4, plus listed versions
1.2-41.2-4ubuntu0.20.04.1~esm11.2-4ubuntu0.20.04.1~esm21.2-4ubuntu0.20.04.1~esm3
1.2-4ubuntu0.20.04.1~esm4
matanza
Ubuntu:20.04:LTS
 All versions, plus listed versions
0.13+ds1-60.13+ds2-1
 None known
sitecopy
Ubuntu:20.04:LTS
 All versions, plus listed versions
1:0.16.6-7build1
 None known
swish-e
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2.4.7-6build12.4.7-6build22.4.7-6ubuntu0.1~esm1
 None known
tdom
Ubuntu:20.04:LTS
 All versions, plus listed versions
0.9.1-1
 None known
wbxml2
Ubuntu:20.04:LTS
 All versions, plus listed versions
0.10.7-1build1
 None known
xmlrpc-c
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1.33.14-8build11.33.14-8build21.33.14-8ubuntu0.20.04.1~esm1
 None known
cadaver
Ubuntu:22.04:LTS
 All versions, plus listed versions
0.23.3-2.1build1
 None known
matanza
Ubuntu:22.04:LTS
 All versions, plus listed versions
0.13+ds2-1
 None known
sitecopy
Ubuntu:22.04:LTS
 All versions, plus listed versions
1:0.16.6-9build11:0.16.6-10
 None known
tdom
Ubuntu:22.04:LTS
 All versions, plus listed versions
0.9.2-1
 None known
wbxml2
Ubuntu:22.04:LTS
 All versions, plus listed versions
0.10.7-1build10.11.7+dfsg-1
 None known
libxmltok
Ubuntu:Pro:22.04:LTS
 before 1.2-4ubuntu0.22.04.1~esm4, plus listed versions
1.2-41.2-4ubuntu0.22.04.1~esm11.2-4ubuntu0.22.04.1~esm21.2-4ubuntu0.22.04.1~esm3
1.2-4ubuntu0.22.04.1~esm4
swish-e
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
2.4.7-6build32.4.7-6.12.4.7-6.1build12.4.7-6.1ubuntu0.1~esm1
 None known
xmlrpc-c
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
1.33.14-91.33.14-101.33.14-10ubuntu0.1~esm1
 None known
cadaver
Ubuntu:24.04:LTS
 All versions, plus listed versions
0.24+dfsg-20.24+dfsg-30.24+dfsg-3build10.24+dfsg-3build2
 None known
matanza
Ubuntu:24.04:LTS
 All versions, plus listed versions
0.13+ds2-10.13+ds2-1build10.13+ds2-1build2
 None known
tdom
Ubuntu:24.04:LTS
 All versions, plus listed versions
0.9.3-10.9.3-1build1
 None known
wbxml2
Ubuntu:24.04:LTS
 All versions, plus listed versions
0.11.8+dfsg-30.11.8+dfsg-3build1
 None known
libxmltok
Ubuntu:Pro:24.04:LTS
 before 1.2-4.1ubuntu2.24.0.4.1+esm2, plus listed versions
1.2-4ubuntu11.2-4.1ubuntu11.2-4.1ubuntu21.2-4.1ubuntu2.24.0.4.1+esm1
1.2-4.1ubuntu2.24.0.4.1+esm2
swish-e
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
2.4.7-6.22.4.7-6.2build12.4.7-6.2build22.4.7-6.2build32.4.7-6.2ubuntu0.1~esm1
 None known
expat
openSUSE:Leap 15.0
 before 2.2.5-lp150.2.6.1
2.2.5-lp150.2.6.1
expat
openSUSE:Leap 15.1
 before 2.2.5-lp151.3.6.1
2.2.5-lp151.3.6.1
chromium
openSUSE:Leap 15.0
From an advisory covering 21 CVEs
 before 78.0.3904.70-lp151.2.39.1
78.0.3904.70-lp151.2.39.1
re2
openSUSE:Leap 15.0
From an advisory covering 21 CVEs
 before 20190901-lp151.10.3.1
20190901-lp151.10.3.1
chromium
openSUSE:Leap 15.1
From an advisory covering 21 CVEs
 before 78.0.3904.70-lp151.2.39.1
78.0.3904.70-lp151.2.39.1
re2
openSUSE:Leap 15.1
From an advisory covering 21 CVEs
 before 20190901-lp151.10.3.1
20190901-lp151.10.3.1
chromium
SUSE:Package Hub 15
From an advisory covering 21 CVEs
 before 78.0.3904.70-bp150.240.1
78.0.3904.70-bp150.240.1
re2
SUSE:Package Hub 15
From an advisory covering 21 CVEs
 before 20190901-bp150.25.1
20190901-bp150.25.1
chromium
SUSE:Package Hub 15 SP1
From an advisory covering 21 CVEs
 before 78.0.3904.70-bp151.3.21.1
78.0.3904.70-bp151.3.21.1
re2
SUSE:Package Hub 15 SP1
From an advisory covering 21 CVEs
 before 20190901-bp151.6.3.1
20190901-bp151.6.3.1
chromium
SUSE:Package Hub 12 SP3
From an advisory covering 86 CVEs
 before 78.0.3904.87-10.1
78.0.3904.87-10.1
MozillaFirefox
openSUSE:Leap 15.1
From an advisory covering 9 CVEs
 before 68.2.0-lp151.2.18.2
68.2.0-lp151.2.18.2
MozillaFirefox-branding-openSUSE
openSUSE:Leap 15.1
From an advisory covering 9 CVEs
 before 68-lp151.3.3.1
68-lp151.3.3.1
firefox-esr-branding-openSUSE
openSUSE:Leap 15.1
From an advisory covering 9 CVEs
 before 68-lp151.3.3.1
68-lp151.3.3.1
MozillaThunderbird
openSUSE:Leap 15.1
From an advisory covering 9 CVEs
 before 68.2.1-lp151.2.16.1
68.2.1-lp151.2.16.1
MozillaFirefox
openSUSE:Leap 15.0
From an advisory covering 9 CVEs
 before 68.2.0-lp150.3.71.1
68.2.0-lp150.3.71.1
MozillaFirefox-branding-openSUSE
openSUSE:Leap 15.0
From an advisory covering 9 CVEs
 before 68-lp150.3.3.1
68-lp150.3.3.1
firefox-esr-branding-openSUSE
openSUSE:Leap 15.0
From an advisory covering 9 CVEs
 before 68-lp150.3.3.1
68-lp150.3.3.1
MozillaThunderbird
openSUSE:Leap 15.0
From an advisory covering 9 CVEs
 before 68.2.1-lp150.3.54.1
68.2.1-lp150.3.54.1
chromium
SUSE:Package Hub 15 SP1
From an advisory covering 21 CVEs
 before 78.0.3904.70-bp151.3.50.1
78.0.3904.70-bp151.3.50.1
python3
openSUSE:Leap 15.1
From an advisory covering 26 CVEs
 before 3.6.10-lp151.6.7.1
3.6.10-lp151.6.7.1
python3-base
openSUSE:Leap 15.1
From an advisory covering 26 CVEs
 before 3.6.10-lp151.6.7.1
3.6.10-lp151.6.7.1
MozillaFirefox
openSUSE:Tumbleweed
From an advisory covering 661 CVEs
 before 92.0-1.2
92.0-1.2
MozillaThunderbird
openSUSE:Tumbleweed
From an advisory covering 394 CVEs
 before 91.1.1-1.1
91.1.1-1.1
chromium
openSUSE:Tumbleweed
From an advisory covering 1081 CVEs
 before 93.0.4577.82-1.1
93.0.4577.82-1.1
expat
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 2.4.1-1.2
2.4.1-1.2
python36
openSUSE:Tumbleweed
From an advisory covering 39 CVEs
 before 3.6.15-1.1
3.6.15-1.1
chromium
openSUSE:Tumbleweed
From an advisory covering 2310 CVEs
 before 113.0.5672.92-1.1
113.0.5672.92-1.1
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 1860 CVEs
 before 128.5.1-1.1
128.5.1-1.1

History

History
RecordedChangedSources
affectedOSV
factsOSV
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-15903 is a high vulnerability (CVSS 7.5) in Libexpat Project Libexpat, published September 4, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.64%, the 93rd percentile. Fixed in expat 2.2.7-r1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 79 package rows, 303 versions, 4,676 references and the rest of 1 source description. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 14 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open