{"id":"CVE-2019-11745","aliases":["ALPINE-CVE-2019-11745","BELL-CVE-2019-11745","DEBIAN-CVE-2019-11745","DLA-2008-1","DLA-2388-1","DSA-4579-1","EUVD-2019-3415","GHSA-gmvm-jpfj-v3f5","MGASA-2019-0374","RHSA-2019:4114","RHSA-2019:4152","RHSA-2019:4190","RHSA-2020:0243","RHSA-2020:0466","RHSA-2020:1267","RHSA-2020:1345","RHSA-2020:1461","SUSE-SU-2019:14260-1","SUSE-SU-2019:3337-1","SUSE-SU-2019:3339-1","SUSE-SU-2019:3347-1","SUSE-SU-2019:3395-1","SUSE-SU-2020:0088-1","SUSE-SU-2020:14418-1","UBUNTU-CVE-2019-11745","USN-4203-1","USN-4203-2","USN-4216-1","USN-4216-2","USN-4241-1","USN-4335-1","openSUSE-SU-2020:0002-1","openSUSE-SU-2020:0003-1","openSUSE-SU-2020:0008-1","openSUSE-SU-2024:11058-1"],"status":"published","title":"When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller...","description":"When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 68.3, Firefox ESR \u003c 68.3, and Firefox \u003c 71.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02994,"percentile":0.87451,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2019-11-25T00:00:00Z","modified":"2026-10-14T10:01:20Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"nss","fixed_in":["3.44.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"nss","fixed_in":["3.47.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"nss","fixed_in":["3.47.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"nss","fixed_in":["3.47.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"nss","fixed_in":["3.47.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"nss","fixed_in":["3.47.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"nss","fixed_in":["3.47.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"nss","fixed_in":["3.47.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"nss","fixed_in":["3.47.1-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"nss","fixed_in":["2:3.47.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nss","fixed_in":["2:3.47.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nss","fixed_in":["2:3.47.1-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"nss","fixed_in":["2:3.26-1+debu8u7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"nss","fixed_in":["3.47.1-1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"rootcerts","fixed_in":["20191126.00-1.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss","fixed_in":["0:3.44.0-9.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-debuginfo","fixed_in":["0:3.44.0-9.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-debugsource","fixed_in":["0:3.44.0-9.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-devel","fixed_in":["0:3.44.0-9.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn","fixed_in":["0:3.44.0-9.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn-debuginfo","fixed_in":["0:3.44.0-9.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn-devel","fixed_in":["0:3.44.0-9.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn-freebl","fixed_in":["0:3.44.0-9.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn-freebl-debuginfo","fixed_in":["0:3.44.0-9.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn-freebl-devel","fixed_in":["0:3.44.0-9.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-sysinit","fixed_in":["0:3.44.0-9.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-sysinit-debuginfo","fixed_in":["0:3.44.0-9.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-tools","fixed_in":["0:3.44.0-9.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-tools-debuginfo","fixed_in":["0:3.44.0-9.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-util","fixed_in":["0:3.44.0-9.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-util-debuginfo","fixed_in":["0:3.44.0-9.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-util-devel","fixed_in":["0:3.44.0-9.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-softokn","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-softokn-debuginfo","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-softokn-freebl","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-softokn-devel","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-softokn-freebl-devel","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-softokn","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-softokn-debuginfo","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-softokn-freebl","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-softokn-devel","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-softokn-freebl-devel","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-softokn","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-softokn-debuginfo","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-softokn-devel","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-softokn-freebl","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-softokn-freebl-devel","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-softokn","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-softokn-debuginfo","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-softokn-devel","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-softokn-freebl","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-softokn-freebl-devel","fixed_in":["0:3.44.0-6.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss","fixed_in":["0:3.44.0-8.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-debuginfo","fixed_in":["0:3.44.0-8.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-debugsource","fixed_in":["0:3.44.0-8.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-devel","fixed_in":["0:3.44.0-8.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-softokn","fixed_in":["0:3.44.0-8.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-softokn-debuginfo","fixed_in":["0:3.44.0-8.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-softokn-devel","fixed_in":["0:3.44.0-8.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-softokn-freebl","fixed_in":["0:3.44.0-8.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-softokn-freebl-debuginfo","fixed_in":["0:3.44.0-8.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-softokn-freebl-devel","fixed_in":["0:3.44.0-8.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-sysinit","fixed_in":["0:3.44.0-8.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-sysinit-debuginfo","fixed_in":["0:3.44.0-8.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-tools","fixed_in":["0:3.44.0-8.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-tools-debuginfo","fixed_in":["0:3.44.0-8.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-util","fixed_in":["0:3.44.0-8.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-util-debuginfo","fixed_in":["0:3.44.0-8.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-util-devel","fixed_in":["0:3.44.0-8.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.6::server","package":"nss-softokn","fixed_in":["0:3.14.3-23.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.6::server","package":"nss-softokn-debuginfo","fixed_in":["0:3.14.3-23.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.6::server","package":"nss-softokn-devel","fixed_in":["0:3.14.3-23.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.6::server","package":"nss-softokn-freebl","fixed_in":["0:3.14.3-23.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.6::server","package":"nss-softokn-freebl-devel","fixed_in":["0:3.14.3-23.el6_6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"nss","fixed_in":["2:3.28.4-0ubuntu0.14.04.5+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"firefox","fixed_in":["71.0+build5-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"nss","fixed_in":["2:3.28.4-0ubuntu0.16.04.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","fixed_in":["1:68.7.0+build1-0ubuntu0.16.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"firefox","fixed_in":["71.0+build5-0ubuntu0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"nss","fixed_in":["2:3.35-2ubuntu2.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"thunderbird","fixed_in":["1:68.4.1+build1-0ubuntu0.18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.44.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.47.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.47.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.47.1-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.26-1+debu8u7"}]}],"versions":["2:3.17.2-1.1","2:3.17.2-1.1+deb8u1","2:3.17.2-1.1+deb8u2","2:3.17.2-1.1+x32","2:3.17.4-1","2:3.18-1","2:3.19-1","2:3.19.1-1","2:3.19.1-2","2:3.19.2-1","2:3.19.2-1+x32.1","2:3.20-1","2:3.20.1-1","2:3.21-1","2:3.21-1.1","2:3.23-1","2:3.23-2","2:3.25-1","2:3.26-1"]},{"source":"osv","ecosystem":"Debian:9","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.26.2-1.1+deb9u2"}]}],"versions":["2:3.26.2-1.1","2:3.26.2-1.1+deb9u1"],"bundled":13},{"source":"osv","ecosystem":"Debian:10","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.42.1-1+deb10u2"}]}],"versions":["2:3.42.1-1","2:3.42.1-1+deb10u1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:7","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"rootcerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20191126.00-1.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-9.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-9.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-9.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-9.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-9.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-9.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-9.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-9.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn-freebl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-9.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-9.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-9.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-sysinit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-9.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-9.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-9.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-9.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-9.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-9.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-6.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-softokn-freebl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-sysinit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-8.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.6::server","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-23.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.6::server","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-23.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.6::server","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-23.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.6::server","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-23.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.6::server","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-23.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-78.54.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-29.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-38.12.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-3.62.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-3.62.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-3.61.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP1","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-3.61.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-109.98.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-19.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-58.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.25-29.12.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.53.1-38.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.14.04.5+esm2"}]}],"versions":["2:3.15.1-1ubuntu1","2:3.15.2-1","2:3.15.3-1","2:3.15.3.1-1","2:3.15.3.1-1.1","2:3.15.3.1-1.1ubuntu1","2:3.15.4-1ubuntu3","2:3.15.4-1ubuntu4","2:3.15.4-1ubuntu5","2:3.15.4-1ubuntu6","2:3.15.4-1ubuntu7","2:3.15.4-1ubuntu7.1","2:3.17-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.2","2:3.17.4-0ubuntu0.14.04.1","2:3.19.2-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.2","2:3.21-0ubuntu0.14.04.1","2:3.21-0ubuntu0.14.04.2","2:3.23-0ubuntu0.14.04.1","2:3.26.2-0ubuntu0.14.04.3","2:3.28.4-0ubuntu0.14.04.1","2:3.28.4-0ubuntu0.14.04.2","2:3.28.4-0ubuntu0.14.04.3","2:3.28.4-0ubuntu0.14.04.4","2:3.28.4-0ubuntu0.14.04.5","2:3.28.4-0ubuntu0.14.04.5+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"71.0+build5-0ubuntu0.16.04.1"}]}],"versions":["41.0.2+build2-0ubuntu1","42.0+build2-0ubuntu1","44.0+build3-0ubuntu2","44.0.1+build1-0ubuntu1","44.0.2+build1-0ubuntu1","45.0+build2-0ubuntu1","45.0.1+build1-0ubuntu1","45.0.2+build1-0ubuntu1","46.0+build5-0ubuntu0.16.04.2","46.0.1+build1-0ubuntu0.16.04.2","47.0+build3-0ubuntu0.16.04.1","48.0+build2-0ubuntu0.16.04.1","49.0+build4-0ubuntu0.16.04.1","49.0.2+build2-0ubuntu0.16.04.2","50.0+build2-0ubuntu0.16.04.2","50.0.2+build1-0ubuntu0.16.04.1","50.1.0+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.2","52.0+build2-0ubuntu0.16.04.1","52.0.1+build2-0ubuntu0.16.04.1","52.0.2+build1-0ubuntu0.16.04.1","53.0+build6-0ubuntu0.16.04.1","53.0.2+build1-0ubuntu0.16.04.2","53.0.3+build1-0ubuntu0.16.04.2","54.0+build3-0ubuntu0.16.04.1","55.0.1+build2-0ubuntu0.16.04.2","55.0.2+build1-0ubuntu0.16.04.1","56.0+build6-0ubuntu0.16.04.1","56.0+build6-0ubuntu0.16.04.2","57.0+build4-0ubuntu0.16.04.5","57.0+build4-0ubuntu0.16.04.6","57.0.1+build2-0ubuntu0.16.04.1","57.0.3+build1-0ubuntu0.16.04.1","57.0.4+build1-0ubuntu0.16.04.1","58.0+build6-0ubuntu0.16.04.1","58.0.1+build1-0ubuntu0.16.04.1","58.0.2+build1-0ubuntu0.16.04.1","59.0+build5-0ubuntu0.16.04.1","59.0.1+build1-0ubuntu0.16.04.1","59.0.2+build1-0ubuntu0.16.04.1","59.0.2+build1-0ubuntu0.16.04.3","60.0+build2-0ubuntu0.16.04.1","60.0.1+build2-0ubuntu0.16.04.1","60.0.2+build1-0ubuntu0.16.04.1","61.0+build3-0ubuntu0.16.04.2","61.0.1+build1-0ubuntu0.16.04.1","62.0+build2-0ubuntu0.16.04.3","62.0+build2-0ubuntu0.16.04.4","62.0+build2-0ubuntu0.16.04.5","62.0.3+build1-0ubuntu0.16.04.2","63.0+build2-0ubuntu0.16.04.2","63.0.3+build1-0ubuntu0.16.04.1","64.0+build3-0ubuntu0.16.04.1","65.0+build2-0ubuntu0.16.04.1","65.0.1+build2-0ubuntu0.16.04.1","66.0+build3-0ubuntu0.16.04.2","66.0.1+build1-0ubuntu0.16.04.1","66.0.2+build1-0ubuntu0.16.04.1","66.0.3+build1-0ubuntu0.16.04.1","66.0.4+build3-0ubuntu0.16.04.1","66.0.5+build1-0ubuntu0.16.04.1","67.0+build2-0ubuntu0.16.04.1","67.0.1+build1-0ubuntu0.16.04.1","67.0.2+build2-0ubuntu0.16.04.1","67.0.3+build1-0ubuntu0.16.04.1","67.0.4+build1-0ubuntu0.16.04.1","68.0+build3-0ubuntu0.16.04.1","68.0.1+build1-0ubuntu0.16.04.1","68.0.2+build1-0ubuntu0.16.04.1","69.0+build2-0ubuntu0.16.04.4","69.0.1+build1-0ubuntu0.16.04.1","69.0.2+build1-0ubuntu0.16.04.1","70.0+build2-0ubuntu0.16.04.1","70.0.1+build1-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.16.04.8"}]}],"versions":["2:3.19.2-1ubuntu1","2:3.19.2.1-0ubuntu1","2:3.21-1ubuntu2","2:3.21-1ubuntu3","2:3.21-1ubuntu4","2:3.23-0ubuntu0.16.04.1","2:3.26.2-0ubuntu0.16.04.2","2:3.28.4-0ubuntu0.16.04.1","2:3.28.4-0ubuntu0.16.04.2","2:3.28.4-0ubuntu0.16.04.3","2:3.28.4-0ubuntu0.16.04.4","2:3.28.4-0ubuntu0.16.04.5","2:3.28.4-0ubuntu0.16.04.6"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:68.7.0+build1-0ubuntu0.16.04.2"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1","1:45.7.0+build1-0ubuntu0.16.04.1","1:45.8.0+build1-0ubuntu0.16.04.1","1:52.1.1+build1-0ubuntu0.16.04.1","1:52.2.1+build1-0ubuntu0.16.04.1","1:52.3.0+build1-0ubuntu0.16.04.1","1:52.4.0+build1-0ubuntu0.16.04.2","1:52.5.0+build1-0ubuntu0.16.04.1","1:52.6.0+build1-0ubuntu0.16.04.1","1:52.7.0+build1-0ubuntu0.16.04.1","1:52.8.0+build1-0ubuntu0.16.04.1","1:52.9.1+build3-0ubuntu0.16.04.1","1:60.2.1+build1-0ubuntu0.16.04.4","1:60.4.0+build2-0ubuntu0.16.04.1","1:60.5.1+build2-0ubuntu0.16.04.1","1:60.6.1+build2-0ubuntu0.16.04.1","1:60.7.0+build1-0ubuntu0.16.04.1","1:60.7.1+build1-0ubuntu0.16.04.1","1:60.7.2+build2-0ubuntu0.16.04.1","1:60.8.0+build1-0ubuntu0.16.04.2","1:60.9.0+build1-0ubuntu0.16.04.2","1:60.9.1+build1-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"71.0+build5-0ubuntu0.18.04.1"}]}],"versions":["56.0+build6-0ubuntu1","57.0.1+build2-0ubuntu1","59.0.1+build1-0ubuntu1","59.0.2+build1-0ubuntu1","60.0+build2-0ubuntu1","60.0.1+build2-0ubuntu0.18.04.1","60.0.2+build1-0ubuntu0.18.04.1","61.0+build3-0ubuntu0.18.04.1","61.0.1+build1-0ubuntu0.18.04.1","62.0+build2-0ubuntu0.18.04.3","62.0+build2-0ubuntu0.18.04.4","62.0+build2-0ubuntu0.18.04.5","62.0.3+build1-0ubuntu0.18.04.1","63.0+build2-0ubuntu0.18.04.2","63.0.3+build1-0ubuntu0.18.04.1","64.0+build3-0ubuntu0.18.04.1","65.0+build2-0ubuntu0.18.04.1","65.0.1+build2-0ubuntu0.18.04.1","66.0+build3-0ubuntu0.18.04.1","66.0.1+build1-0ubuntu0.18.04.1","66.0.2+build1-0ubuntu0.18.04.1","66.0.3+build1-0ubuntu0.18.04.1","66.0.4+build3-0ubuntu0.18.04.1","66.0.5+build1-0ubuntu0.18.04.1","67.0+build2-0ubuntu0.18.04.1","67.0.1+build1-0ubuntu0.18.04.1","67.0.2+build2-0ubuntu0.18.04.1","67.0.3+build1-0ubuntu0.18.04.1","67.0.4+build1-0ubuntu0.18.04.1","68.0+build3-0ubuntu0.18.04.1","68.0.1+build1-0ubuntu0.18.04.1","68.0.2+build1-0ubuntu0.18.04.1","69.0+build2-0ubuntu0.18.04.1","69.0.1+build1-0ubuntu0.18.04.1","69.0.2+build1-0ubuntu0.18.04.1","70.0+build2-0ubuntu0.18.04.1","70.0.1+build1-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.35-2ubuntu2.5"}]}],"versions":["2:3.32-1ubuntu3","2:3.34-1ubuntu1","2:3.35-2ubuntu2","2:3.35-2ubuntu2.1","2:3.35-2ubuntu2.2","2:3.35-2ubuntu2.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:68.4.1+build1-0ubuntu0.18.04.1"}]}],"versions":["1:52.4.0+build1-0ubuntu2","1:52.6.0+build1-0ubuntu1","1:52.7.0+build1-0ubuntu1","1:52.8.0+build1-0ubuntu0.18.04.1","1:52.9.1+build3-0ubuntu0.18.04.1","1:60.2.1+build1-0ubuntu0.18.04.2","1:60.4.0+build2-0ubuntu0.18.04.1","1:60.5.1+build2-0ubuntu0.18.04.1","1:60.6.1+build2-0ubuntu0.18.04.1","1:60.7.0+build1-0ubuntu0.18.04.1","1:60.7.1+build1-0ubuntu0.18.04.1","1:60.7.2+build2-0ubuntu0.18.04.1","1:60.8.0+build1-0ubuntu0.18.04.1","1:60.9.0+build1-0ubuntu0.18.04.1","1:68.2.1+build1-0ubuntu0.18.04.1","1:68.2.2+build1-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.16.04.8"}]}],"versions":["2:3.19.2-1ubuntu1","2:3.19.2.1-0ubuntu1","2:3.21-1ubuntu2","2:3.21-1ubuntu3","2:3.21-1ubuntu4","2:3.23-0ubuntu0.16.04.1","2:3.26.2-0ubuntu0.16.04.2","2:3.28.4-0ubuntu0.16.04.1","2:3.28.4-0ubuntu0.16.04.2","2:3.28.4-0ubuntu0.16.04.3","2:3.28.4-0ubuntu0.16.04.4","2:3.28.4-0ubuntu0.16.04.5","2:3.28.4-0ubuntu0.16.04.6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.35-2ubuntu2.5"}]}],"versions":["2:3.32-1ubuntu3","2:3.34-1ubuntu1","2:3.35-2ubuntu2","2:3.35-2ubuntu2.1","2:3.35-2ubuntu2.2","2:3.35-2ubuntu2.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.14.04.5+esm2"}]}],"versions":["2:3.15.1-1ubuntu1","2:3.15.2-1","2:3.15.3-1","2:3.15.3.1-1","2:3.15.3.1-1.1","2:3.15.3.1-1.1ubuntu1","2:3.15.4-1ubuntu3","2:3.15.4-1ubuntu4","2:3.15.4-1ubuntu5","2:3.15.4-1ubuntu6","2:3.15.4-1ubuntu7","2:3.15.4-1ubuntu7.1","2:3.17-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.2","2:3.17.4-0ubuntu0.14.04.1","2:3.19.2-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.2","2:3.21-0ubuntu0.14.04.1","2:3.21-0ubuntu0.14.04.2","2:3.23-0ubuntu0.14.04.1","2:3.26.2-0ubuntu0.14.04.3","2:3.28.4-0ubuntu0.14.04.1","2:3.28.4-0ubuntu0.14.04.2","2:3.28.4-0ubuntu0.14.04.3","2:3.28.4-0ubuntu0.14.04.4","2:3.28.4-0ubuntu0.14.04.5","2:3.28.4-0ubuntu0.14.04.5+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"71.0+build5-0ubuntu0.18.04.1"}]}],"versions":["56.0+build6-0ubuntu1","57.0.1+build2-0ubuntu1","59.0.1+build1-0ubuntu1","59.0.2+build1-0ubuntu1","60.0+build2-0ubuntu1","60.0.1+build2-0ubuntu0.18.04.1","60.0.2+build1-0ubuntu0.18.04.1","61.0+build3-0ubuntu0.18.04.1","61.0.1+build1-0ubuntu0.18.04.1","62.0+build2-0ubuntu0.18.04.3","62.0+build2-0ubuntu0.18.04.4","62.0+build2-0ubuntu0.18.04.5","62.0.3+build1-0ubuntu0.18.04.1","63.0+build2-0ubuntu0.18.04.2","63.0.3+build1-0ubuntu0.18.04.1","64.0+build3-0ubuntu0.18.04.1","65.0+build2-0ubuntu0.18.04.1","65.0.1+build2-0ubuntu0.18.04.1","66.0+build3-0ubuntu0.18.04.1","66.0.1+build1-0ubuntu0.18.04.1","66.0.2+build1-0ubuntu0.18.04.1","66.0.3+build1-0ubuntu0.18.04.1","66.0.4+build3-0ubuntu0.18.04.1","66.0.5+build1-0ubuntu0.18.04.1","67.0+build2-0ubuntu0.18.04.1","67.0.1+build1-0ubuntu0.18.04.1","67.0.2+build2-0ubuntu0.18.04.1","67.0.3+build1-0ubuntu0.18.04.1","67.0.4+build1-0ubuntu0.18.04.1","68.0+build3-0ubuntu0.18.04.1","68.0.1+build1-0ubuntu0.18.04.1","68.0.2+build1-0ubuntu0.18.04.1","69.0+build2-0ubuntu0.18.04.1","69.0.1+build1-0ubuntu0.18.04.1","69.0.2+build1-0ubuntu0.18.04.1","70.0+build2-0ubuntu0.18.04.1","70.0.1+build1-0ubuntu0.18.04.1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"71.0+build5-0ubuntu0.16.04.1"}]}],"versions":["41.0.2+build2-0ubuntu1","42.0+build2-0ubuntu1","44.0+build3-0ubuntu2","44.0.1+build1-0ubuntu1","44.0.2+build1-0ubuntu1","45.0+build2-0ubuntu1","45.0.1+build1-0ubuntu1","45.0.2+build1-0ubuntu1","46.0+build5-0ubuntu0.16.04.2","46.0.1+build1-0ubuntu0.16.04.2","47.0+build3-0ubuntu0.16.04.1","48.0+build2-0ubuntu0.16.04.1","49.0+build4-0ubuntu0.16.04.1","49.0.2+build2-0ubuntu0.16.04.2","50.0+build2-0ubuntu0.16.04.2","50.0.2+build1-0ubuntu0.16.04.1","50.1.0+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.2","52.0+build2-0ubuntu0.16.04.1","52.0.1+build2-0ubuntu0.16.04.1","52.0.2+build1-0ubuntu0.16.04.1","53.0+build6-0ubuntu0.16.04.1","53.0.2+build1-0ubuntu0.16.04.2","53.0.3+build1-0ubuntu0.16.04.2","54.0+build3-0ubuntu0.16.04.1","55.0.1+build2-0ubuntu0.16.04.2","55.0.2+build1-0ubuntu0.16.04.1","56.0+build6-0ubuntu0.16.04.1","56.0+build6-0ubuntu0.16.04.2","57.0+build4-0ubuntu0.16.04.5","57.0+build4-0ubuntu0.16.04.6","57.0.1+build2-0ubuntu0.16.04.1","57.0.3+build1-0ubuntu0.16.04.1","57.0.4+build1-0ubuntu0.16.04.1","58.0+build6-0ubuntu0.16.04.1","58.0.1+build1-0ubuntu0.16.04.1","58.0.2+build1-0ubuntu0.16.04.1","59.0+build5-0ubuntu0.16.04.1","59.0.1+build1-0ubuntu0.16.04.1","59.0.2+build1-0ubuntu0.16.04.1","59.0.2+build1-0ubuntu0.16.04.3","60.0+build2-0ubuntu0.16.04.1","60.0.1+build2-0ubuntu0.16.04.1","60.0.2+build1-0ubuntu0.16.04.1","61.0+build3-0ubuntu0.16.04.2","61.0.1+build1-0ubuntu0.16.04.1","62.0+build2-0ubuntu0.16.04.3","62.0+build2-0ubuntu0.16.04.4","62.0+build2-0ubuntu0.16.04.5","62.0.3+build1-0ubuntu0.16.04.2","63.0+build2-0ubuntu0.16.04.2","63.0.3+build1-0ubuntu0.16.04.1","64.0+build3-0ubuntu0.16.04.1","65.0+build2-0ubuntu0.16.04.1","65.0.1+build2-0ubuntu0.16.04.1","66.0+build3-0ubuntu0.16.04.2","66.0.1+build1-0ubuntu0.16.04.1","66.0.2+build1-0ubuntu0.16.04.1","66.0.3+build1-0ubuntu0.16.04.1","66.0.4+build3-0ubuntu0.16.04.1","66.0.5+build1-0ubuntu0.16.04.1","67.0+build2-0ubuntu0.16.04.1","67.0.1+build1-0ubuntu0.16.04.1","67.0.2+build2-0ubuntu0.16.04.1","67.0.3+build1-0ubuntu0.16.04.1","67.0.4+build1-0ubuntu0.16.04.1","68.0+build3-0ubuntu0.16.04.1","68.0.1+build1-0ubuntu0.16.04.1","68.0.2+build1-0ubuntu0.16.04.1","69.0+build2-0ubuntu0.16.04.4","69.0.1+build1-0ubuntu0.16.04.1","69.0.2+build1-0ubuntu0.16.04.1","70.0+build2-0ubuntu0.16.04.1","70.0.1+build1-0ubuntu0.16.04.1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:68.4.1+build1-0ubuntu0.18.04.1"}]}],"versions":["1:52.4.0+build1-0ubuntu2","1:52.6.0+build1-0ubuntu1","1:52.7.0+build1-0ubuntu1","1:52.8.0+build1-0ubuntu0.18.04.1","1:52.9.1+build3-0ubuntu0.18.04.1","1:60.2.1+build1-0ubuntu0.18.04.2","1:60.4.0+build2-0ubuntu0.18.04.1","1:60.5.1+build2-0ubuntu0.18.04.1","1:60.6.1+build2-0ubuntu0.18.04.1","1:60.7.0+build1-0ubuntu0.18.04.1","1:60.7.1+build1-0ubuntu0.18.04.1","1:60.7.2+build2-0ubuntu0.18.04.1","1:60.8.0+build1-0ubuntu0.18.04.1","1:60.9.0+build1-0ubuntu0.18.04.1","1:68.2.1+build1-0ubuntu0.18.04.1","1:68.2.2+build1-0ubuntu0.18.04.1"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:68.7.0+build1-0ubuntu0.16.04.2"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1","1:45.7.0+build1-0ubuntu0.16.04.1","1:45.8.0+build1-0ubuntu0.16.04.1","1:52.1.1+build1-0ubuntu0.16.04.1","1:52.2.1+build1-0ubuntu0.16.04.1","1:52.3.0+build1-0ubuntu0.16.04.1","1:52.4.0+build1-0ubuntu0.16.04.2","1:52.5.0+build1-0ubuntu0.16.04.1","1:52.6.0+build1-0ubuntu0.16.04.1","1:52.7.0+build1-0ubuntu0.16.04.1","1:52.8.0+build1-0ubuntu0.16.04.1","1:52.9.1+build3-0ubuntu0.16.04.1","1:60.2.1+build1-0ubuntu0.16.04.4","1:60.4.0+build2-0ubuntu0.16.04.1","1:60.5.1+build2-0ubuntu0.16.04.1","1:60.6.1+build2-0ubuntu0.16.04.1","1:60.7.0+build1-0ubuntu0.16.04.1","1:60.7.1+build1-0ubuntu0.16.04.1","1:60.7.2+build2-0ubuntu0.16.04.1","1:60.8.0+build1-0ubuntu0.16.04.2","1:60.9.0+build1-0ubuntu0.16.04.2","1:60.9.1+build1-0ubuntu0.16.04.1"],"bundled":38},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-lp151.2.21.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.3.0-lp151.2.19.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-lp151.2.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-lp151.2.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.69.1-1.2"}]}],"bundled":14}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"firefox esr"},{"vendor":"mozilla","product":"firefox_esr"},{"vendor":"mozilla","product":"thunderbird"},{"vendor":"opensuse","product":"leap"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"siemens","product":"ruggedcom_rox_mx5000_firmware"},{"vendor":"siemens","product":"ruggedcom_rox_rx1400_firmware"},{"vendor":"siemens","product":"ruggedcom_rox_rx1500_firmware"},{"vendor":"siemens","product":"ruggedcom_rox_rx1501_firmware"},{"vendor":"siemens","product":"ruggedcom_rox_rx1510_firmware"},{"vendor":"siemens","product":"ruggedcom_rox_rx1511_firmware"},{"vendor":"siemens","product":"ruggedcom_rox_rx1512_firmware"},{"vendor":"siemens","product":"ruggedcom_rox_rx5000_firmware"}],"references":[{"url":"https://www.mozilla.org/security/advisories/mfsa2019-36/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2019-38/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2019-37/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1586176","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Vendor Advisory","fix"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00000.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Issue Tracking","Mailing List","Third Party Advisory","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4241-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0243","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0466","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202003-02","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202003-10","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202003-37","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4335-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11745","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gmvm-jpfj-v3f5"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-11745","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-11745","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-11745","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0374.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25792","tags":["report"]},{"url":"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47.1_release_notes","tags":["web","article","report"]},{"url":"https://usn.ubuntu.com/4203-1/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:4114","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1774831","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4114.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11745","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11745","tags":["advisory","report"]},{"url":"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44.3_release_notes","tags":["article","report"]},{"url":"https://access.redhat.com/errata/RHSA-2019:4152","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4152.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:4190","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728437","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4190.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11729","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11729","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11729","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11729","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0243.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0466.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1267","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1591163","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1267.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-0495","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-0495","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0495","tags":["advisory"]},{"url":"https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1345","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1345.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1461","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1461.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914260-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1158328","tags":["report"]},{"url":"https://bugzilla.suse.com/1158527","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17012","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193337-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1157652","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193339-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193347-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193395-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1141322","tags":["report"]},{"url":"https://bugzilla.suse.com/1159819","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17006","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200088-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014418-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1168669","tags":["report"]},{"url":"https://bugzilla.suse.com/1169746","tags":["report"]},{"url":"https://bugzilla.suse.com/1170908","tags":["report"]},{"url":"https://bugzilla.suse.com/1171978","tags":["report"]},{"url":"https://bugzilla.suse.com/1173032","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12402","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-11745","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2019-38/#CVE-2019-11745","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4203-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4203-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4216-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4216-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4241-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4335-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-11756","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17008","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17024","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17026","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11755","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11757","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11759","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11760","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11761","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11762","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11763","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11764","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15903","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-20503","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6792","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6793","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6794","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6795","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6798","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6800","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6806","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6807","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6811","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6812","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6814","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6819","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6820","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6821","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6822","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6825","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IT3UIP5O2QPRMJEIU4SZ6MBHNKBLUYZT/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NRHDWT3QC423VY6ACEY346YD3PPCAECZ/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AN4USN47JRBDAYTJ7ARVSFYOKEKTGTFV/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6829","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-11745","description":"When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 68.3, Firefox ESR \u003c 68.3, and Firefox \u003c 71.","status":"published","published":"2020-01-08T19:22:00Z","modified":"2024-08-04T23:03:32.56Z","updated_at":"2026-11-02T14:20:26.416173Z"}],"euvd":[{"id":"EUVD-2019-3415","description":"When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 68.3, Firefox ESR \u003c 68.3, and Firefox \u003c 71.","status":"published","published":"2020-01-08T19:22:00Z","modified":"2024-08-04T23:03:32Z","updated_at":"2026-11-03T02:40:47.960625Z"}],"ghsa":[{"id":"GHSA-gmvm-jpfj-v3f5","title":"When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller...","description":"When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 68.3, Firefox ESR \u003c 68.3, and Firefox \u003c 71.","status":"published","published":"2022-05-24T17:05:46Z","modified":"2023-01-29T05:00:59Z","cwes":["CWE-787"],"updated_at":"2026-11-02T14:44:42.615019Z"}],"nvd":[{"id":"CVE-2019-11745","description":"When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 68.3, Firefox ESR \u003c 68.3, and Firefox \u003c 71.","status":"published","published":"2020-01-08T20:15:12.313Z","modified":"2026-06-17T02:13:33.137Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:05:42.416368Z"}],"osv":[{"id":"ALPINE-CVE-2019-11745","description":"When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 68.3, Firefox ESR \u003c 68.3, and Firefox \u003c 71.","status":"published","published":"2020-01-08T20:15:12.313Z","modified":"2026-09-21T06:17:52.460898504Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"BELL-CVE-2019-11745","title":"CVE-2019-11745 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:43.462053Z","modified":"2026-01-26T09:46:47.968699Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2019-11745","description":"When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 68.3, Firefox ESR \u003c 68.3, and Firefox \u003c 71.","status":"published","published":"2020-01-08T20:15:12.313Z","modified":"2026-04-16T04:36:29.757738492Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:10.718934Z"},{"id":"DEBIAN-CVE-2019-11745","description":"When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 68.3, Firefox ESR \u003c 68.3, and Firefox \u003c 71.","status":"published","published":"2020-01-08T20:15:12.313Z","modified":"2026-09-21T07:01:28.360387433Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.170944Z"},{"id":"RHSA-2019:4114","title":"Red Hat Security Advisory: nss security update","status":"published","published":"2024-09-16T03:23:21Z","modified":"2026-06-27T10:08:40Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2019:4152","title":"Red Hat Security Advisory: nss-softokn security update","status":"published","published":"2024-09-16T03:23:36Z","modified":"2026-06-27T10:08:41Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2019:4190","title":"Red Hat Security Advisory: nss, nss-softokn, nss-util security update","status":"published","published":"2024-09-16T03:23:30Z","modified":"2026-06-27T10:08:42Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0243","title":"Red Hat Security Advisory: nss security update","status":"published","published":"2024-09-16T03:23:43Z","modified":"2026-06-27T10:09:04Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0466","title":"Red Hat Security Advisory: nss-softokn security update","status":"published","published":"2024-09-16T03:23:51Z","modified":"2026-06-27T10:09:08Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1267","title":"Red Hat Security Advisory: nss-softokn security update","status":"published","published":"2024-09-16T03:24:00Z","modified":"2026-10-14T10:01:19Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1345","title":"Red Hat Security Advisory: nss-softokn security update","status":"published","published":"2024-09-16T03:24:08Z","modified":"2026-10-14T10:01:19Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1461","title":"Red Hat Security Advisory: nss-softokn security update","status":"published","published":"2024-09-16T03:24:25Z","modified":"2026-10-14T10:01:20Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"UBUNTU-CVE-2019-11745","description":"When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 68.3, Firefox ESR \u003c 68.3, and Firefox \u003c 71.","status":"published","published":"2019-11-25T00:00:00Z","modified":"2026-04-22T12:08:01.275534Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:19.202697Z"},{"id":"DLA-2008-1","title":"nss - security update","status":"published","published":"2019-11-25T00:00:00Z","modified":"2026-03-09T01:17:59.843715Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2388-1","title":"nss - security update","status":"published","published":"2020-09-29T00:00:00Z","modified":"2026-03-09T01:17:51.047579Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4579-1","title":"nss - security update","status":"published","published":"2019-12-06T00:00:00Z","modified":"2026-03-09T02:10:42.710146Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2019-0374","title":"Updated nss packages fix security vulnerability","description":"Updated nss packages fix security vulnerability:\n\nOut-of-bounds write when passing an output buffer smaller than the block\nsize to NSC_EncryptUpdate (CVE-2019-11745).\n\nAlso, rootcerts has been updated to 20191126.00\n","status":"published","published":"2019-12-08T18:12:18Z","modified":"2026-04-16T04:41:23.477443385Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0002-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\nMozilla Firefox was updated to 68.3esr (MFSA 2019-37 bsc#1158328)\t  \n\t  \nSecurity issues fixed: \n\n- CVE-2019-17008: Fixed a use-after-free in worker destruction (bmo#1546331)\n- CVE-2019-13722: Fixed a stack corruption due to incorrect number of arguments \n  in WebRTC code (bmo#1580156)\n- CVE-2019-11745: Fixed an out of bounds write in NSS when encrypting with a \n  block cipher (bmo#1586176)\n- CVE-2019-17009: Fixed an issue where updater temporary files accessible to \n  unprivileged processes (bmo#1510494)\n- CVE-2019-17010: Fixed a use-after-free when performing device orientation \n  checks (bmo#1581084)\n- CVE-2019-17005: Fixed a buffer overflow in plain text serializer (bmo#1584170)\n- CVE-2019-17011: Fixed a use-after-free when retrieving a document \n  in antitracking (bmo#1591334)\n- CVE-2019-17012: Fixed multiple memmory issues\n  (bmo#1449736, bmo#1533957, bmo#1560667,bmo#1567209, bmo#1580288, bmo#1585760, \n  bmo#1592502)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-01-09T16:29:33Z","modified":"2026-02-04T03:49:32.397852Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:0003-1","title":"Security update for MozillaThunderbird","description":"This update for MozillaThunderbird fixes the following issues:\n\nMozilla Thunderbird was updated to 68.3esr (MFSA 2019-38 bsc#1158328) \t  \n\nSecurity issues fixed: \n\n- CVE-2019-17008: Fixed a use-after-free in worker destruction (bmo#1546331)\n- CVE-2019-13722: Fixed a stack corruption due to incorrect number of arguments \n  in WebRTC code (bmo#1580156)\n- CVE-2019-11745: Fixed an out of bounds write in NSS when encrypting with a \n  block cipher (bmo#1586176)\n- CVE-2019-17009: Fixed an issue where updater temporary files accessible to \n  unprivileged processes (bmo#1510494)\n- CVE-2019-17010: Fixed a use-after-free when performing device orientation \n  checks (bmo#1581084)\n- CVE-2019-17005: Fixed a buffer overflow in plain text serializer (bmo#1584170)\n- CVE-2019-17011: Fixed a use-after-free when retrieving a document \n  in antitracking (bmo#1591334)\n- CVE-2019-17012: Fixed multiple memmory issues\n  (bmo#1449736, bmo#1533957, bmo#1560667,bmo#1567209, bmo#1580288, bmo#1585760, \n  bmo#1592502)\n\nOther issues addressed:\n\n- New: Message display toolbar action WebExtension API (bmo#1531597)\n- New: Navigation buttons are now available in content tabs (bmo#787683)\n- Fixed an issue where write window was not always correct (bmo#1593280)\n- Fixed toolbar issues (bmo#1584160)\n- Fixed issues with LDAP lookup when SSL was enabled (bmo#1576364)\n- Fixed an issue with scam link confirmation panel (bmo#1596413)\n- Fixed an issue with the write window where the Link Properties \n  dialog was not showing named anchors in context menu (bmo#1593629)\n- Fixed issues with calendar (bmo#1588516)\n- Fixed issues with chat where reordering via drag-and-drop was not working\n  on Instant messaging status dialog (bmo#1591505)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-01-09T16:29:51Z","modified":"2026-02-04T02:21:13.258278Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:0008-1","title":"Security update for mozilla-nspr, mozilla-nss","description":"This update for mozilla-nspr, mozilla-nss fixes the following issues:\n\nmozilla-nss was updated to NSS 3.47.1:\n\nSecurity issues fixed:\n\n- CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819).\n- CVE-2019-11745: EncryptUpdate should use maxout, not block size (bsc#1158527).\n- CVE-2019-11727: Fixed vulnerability sign CertificateVerify with PKCS#1 v1.5 signatures issue (bsc#1141322).\n\nmozilla-nspr was updated to version 4.23:\n\n- Whitespace in C files was cleaned up and no longer uses tab characters for indenting.\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-01-11T19:14:54Z","modified":"2026-02-04T04:03:11.005799Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:11058-1","title":"libfreebl3-3.69.1-1.2 on GA media","description":"These are all security issues fixed in the libfreebl3-3.69.1-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:19:08.673425Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2019:14260-1","title":"Security update for MozillaFirefox, mozilla-nspr, mozilla-nss","description":"This update for MozillaFirefox, mozilla-nspr, mozilla-nss fixes the following issues:\n\nUpdate Firefox Extended Support Release to 68.3.0 ESR (MFSA 2019-37 / bsc#1158328)\n\nSecurity issues fixed:\n\n- CVE-2019-17008: Use-after-free in worker destruction (bmo#1546331).\n- CVE-2019-13722: Stack corruption due to incorrect number of arguments in WebRTC code (bmo#1580156).\n- CVE-2019-11745: Out of bounds write in NSS when encrypting with a block cipher (bmo#1586176).\n- CVE-2019-17009: Updater temporary files accessible to unprivileged processes (bmo#1510494).\n- CVE-2019-17010: Use-after-free when performing device orientation checks (bmo#1581084).\n- CVE-2019-17005: Buffer overflow in plain text serializer (bmo#1584170).\n- CVE-2019-17011: Use-after-free when retrieving a document in antitracking (bmo#1591334).\n- CVE-2019-17012: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3 (bmo#1449736, bmo#1533957, bmo#1560667, bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502).\n\nUpdate mozilla-nss to version 3.47.1 (bsc#1158527):\n\nSecurity issues fixed:\n\n- CVE-2019-11745: EncryptUpdate should use maxout, not block size.\n\nBug fixes:\n\n- Fix a crash that could be caused by client certificates during startup (bmo#1590495, bsc#1158527)\n- Fix compile-time warnings from uninitialized variables in a perl script (bmo#1589810)\n- Support AES HW acceleration on ARMv8 (bmo#1152625)\n- Allow per-socket run-time ordering of the cipher suites presented in ClientHello (bmo#1267894)\n- Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)\n- Remove arbitrary HKDF output limit by allocating space as needed (bmo#1577953)\n\nUpdate mozilla-nspr to version 4.23:\n\nBug fixes:\n\n- fixed a build failure that was introduced in 4.22\n- correctness fix for Win64 socket polling\n- whitespace in C files was cleaned up and no longer uses tab characters for indenting\n- added support for the ARC architecture\n- removed support for the following platforms: OSF1/Tru64, DGUX, IRIX, Symbian, BeOS\n- correctness and build fixes\n","status":"published","published":"2019-12-20T14:34:01Z","modified":"2026-02-04T03:48:18.669351Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:3337-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\nMozilla Firefox was updated to 68.3esr (MFSA 2019-37 bsc#1158328)\t  \n\t  \nSecurity issues fixed: \n\n- CVE-2019-17008: Fixed a use-after-free in worker destruction (bmo#1546331)\n- CVE-2019-13722: Fixed a stack corruption due to incorrect number of arguments \n  in WebRTC code (bmo#1580156)\n- CVE-2019-11745: Fixed an out of bounds write in NSS when encrypting with a \n  block cipher (bmo#1586176)\n- CVE-2019-17009: Fixed an issue where updater temporary files accessible to \n  unprivileged processes (bmo#1510494)\n- CVE-2019-17010: Fixed a use-after-free when performing device orientation \n  checks (bmo#1581084)\n- CVE-2019-17005: Fixed a buffer overflow in plain text serializer (bmo#1584170)\n- CVE-2019-17011: Fixed a use-after-free when retrieving a document \n  in antitracking (bmo#1591334)\n- CVE-2019-17012: Fixed multiple memmory issues\n  (bmo#1449736, bmo#1533957, bmo#1560667,bmo#1567209, bmo#1580288, bmo#1585760, \n  bmo#1592502)\n","status":"published","published":"2019-12-18T17:17:32Z","modified":"2026-02-04T04:22:27.151003Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:3339-1","title":"Security update for MozillaThunderbird","description":"This update for MozillaThunderbird fixes the following issues:\n\nMozilla Thunderbird was updated to 68.3esr (MFSA 2019-38 bsc#1158328) \t  \n\nSecurity issues fixed: \n\n- CVE-2019-17008: Fixed a use-after-free in worker destruction (bmo#1546331)\n- CVE-2019-13722: Fixed a stack corruption due to incorrect number of arguments \n  in WebRTC code (bmo#1580156)\n- CVE-2019-11745: Fixed an out of bounds write in NSS when encrypting with a \n  block cipher (bmo#1586176)\n- CVE-2019-17009: Fixed an issue where updater temporary files accessible to \n  unprivileged processes (bmo#1510494)\n- CVE-2019-17010: Fixed a use-after-free when performing device orientation \n  checks (bmo#1581084)\n- CVE-2019-17005: Fixed a buffer overflow in plain text serializer (bmo#1584170)\n- CVE-2019-17011: Fixed a use-after-free when retrieving a document \n  in antitracking (bmo#1591334)\n- CVE-2019-17012: Fixed multiple memmory issues\n  (bmo#1449736, bmo#1533957, bmo#1560667,bmo#1567209, bmo#1580288, bmo#1585760, \n  bmo#1592502)\n\nOther issues addressed:\n\n- New: Message display toolbar action WebExtension API (bmo#1531597)\n- New: Navigation buttons are now available in content tabs (bmo#787683)\n- Fixed an issue where write window was not always correct (bmo#1593280)\n- Fixed toolbar issues (bmo#1584160)\n- Fixed issues with LDAP lookup when SSL was enabled (bmo#1576364)\n- Fixed an issue with scam link confirmation panel (bmo#1596413)\n- Fixed an issue with the write window where the Link Properties \n  dialog was not showing named anchors in context menu (bmo#1593629)\n- Fixed issues with calendar (bmo#1588516)\n- Fixed issues with chat where reordering via drag-and-drop was not working\n  on Instant messaging status dialog (bmo#1591505)\n","status":"published","published":"2019-12-18T17:18:32Z","modified":"2026-02-04T03:13:54.81347Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:3347-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\nMozilla Firefox was updated to 68.3esr (MFSA 2019-37 bsc#1158328)\t  \n\t  \nSecurity issues fixed: \n\n- CVE-2019-17008: Fixed a use-after-free in worker destruction (bmo#1546331)\n- CVE-2019-13722: Fixed a stack corruption due to incorrect number of arguments \n  in WebRTC code (bmo#1580156)\n- CVE-2019-11745: Fixed an out of bounds write in NSS when encrypting with a \n  block cipher (bmo#1586176)\n- CVE-2019-17009: Fixed an issue where updater temporary files accessible to \n  unprivileged processes (bmo#1510494)\n- CVE-2019-17010: Fixed a use-after-free when performing device orientation \n  checks (bmo#1581084)\n- CVE-2019-17005: Fixed a buffer overflow in plain text serializer (bmo#1584170)\n- CVE-2019-17011: Fixed a use-after-free when retrieving a document \n  in antitracking (bmo#1591334)\n- CVE-2019-17012: Fixed multiple memmory issues\n  (bmo#1449736, bmo#1533957, bmo#1560667,bmo#1567209, bmo#1580288, bmo#1585760, \n  bmo#1592502)\n","status":"published","published":"2019-12-19T15:12:50Z","modified":"2026-02-04T03:05:57.866893Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:3395-1","title":"Security update for mozilla-nspr, mozilla-nss","description":"This update for mozilla-nspr, mozilla-nss fixes the following issues:\n\nmozilla-nss was updated to NSS 3.47.1:\n\nSecurity issues fixed:\n\n- CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819).\n- CVE-2019-11745: EncryptUpdate should use maxout, not block size (bsc#1158527).\n- CVE-2019-11727: Fixed vulnerability sign CertificateVerify with PKCS#1 v1.5 signatures issue (bsc#1141322).\n\nmozilla-nspr was updated to version 4.23:\n\n- Whitespace in C files was cleaned up and no longer uses tab characters for indenting.\n","status":"published","published":"2019-12-30T13:05:21Z","modified":"2026-02-04T04:17:02.36777Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0088-1","title":"Security update for mozilla-nspr, mozilla-nss","description":"This update for mozilla-nspr, mozilla-nss fixes the following issues:\n\nmozilla-nss was updated to NSS 3.47.1:\n\nSecurity issues fixed:\n\n- CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819).\n- CVE-2019-11745: EncryptUpdate should use maxout, not block size (bsc#1158527).\n- CVE-2019-11727: Fixed vulnerability sign CertificateVerify with PKCS#1 v1.5 signatures issue (bsc#1141322).\n\nmozilla-nspr was updated to version 4.23:\n\n- Whitespace in C files was cleaned up and no longer uses tab characters for indenting.\n","status":"published","published":"2020-01-13T14:48:01Z","modified":"2025-05-02T04:08:41.156292Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:14418-1","title":"Security update for mozilla-nspr, mozilla-nss","description":"This update for mozilla-nspr, mozilla-nss fixes the following issues:\n\nmozilla-nss was updated to version 3.53.1\n\n- CVE-2019-11745: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate\n- CVE-2020-12402: Fixed a potential side channel attack during RSA key generation (bsc#1173032).\n- CVE-2020-12399: Fixed a timing attack on DSA signature generation (bsc#1171978).\n- CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819).\n- CVE-2019-11727: A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages.\n- Fixed various FIPS issues in libfreebl3 which were causing segfaults in the test suite of chrony (bsc#1168669).\n- Fixed an issue where Firefox tab was crashing (bsc#1170908).\n\nRelease notes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53_release_notes\n\nmozilla-nspr was updated to version 4.25.\n","status":"published","published":"2020-07-06T14:31:09Z","modified":"2026-02-04T04:34:10.79541Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-4203-1","title":"nss vulnerability","description":"It was discovered that NSS incorrectly handled certain memory operations. A\nremote attacker could use this issue to cause NSS to crash, resulting in a\ndenial of service, or possibly execute arbitrary code.\n","status":"published","published":"2019-11-27T16:55:54Z","modified":"2026-04-22T09:50:16.679602Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4203-2","title":"nss vulnerability","description":"USN-4203-1 fixed a vulnerability in NSS. This update provides\nthe corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that NSS incorrectly handled certain memory operations. A\n remote attacker could use this issue to cause NSS to crash, resulting in a\n denial of service, or possibly execute arbitrary code.\n","status":"published","published":"2019-11-27T18:23:47Z","modified":"2026-04-22T09:50:16.175061Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4216-1","title":"firefox vulnerabilities","description":"Multiple security issues were discovered in Firefox. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit these to cause a denial of service, obtain sensitive\ninformation, or execute arbitrary code.\n","status":"published","published":"2019-12-09T22:54:22Z","modified":"2026-04-22T09:50:37.511354Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4216-2","title":"firefox vulnerabilities","description":"USN-4216-1 fixed vulnerabilities in Firefox. This update provides the\ncorresponding update for Ubuntu 16.04 LTS.\n\nOriginal advisory details:\n\n Multiple security issues were discovered in Firefox. If a user were\n tricked in to opening a specially crafted website, an attacker could\n potentially exploit these to cause a denial of service, obtain sensitive\n information, or execute arbitrary code.\n","status":"published","published":"2019-12-13T13:07:44Z","modified":"2026-04-22T09:50:46.338526Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4241-1","title":"thunderbird vulnerabilities","description":"Multiple security issues were discovered in Thunderbird. If a user were\ntricked in to opening a specially crafted website in a browsing context,\nan attacker could potentially exploit these to cause a denial of service,\nconduct cross-site scripting (XSS) attacks, or execute arbitrary code.\n(CVE-2019-17005, CVE-2019-17008, CVE-2019-17010, CVE-2019-17011,\nCVE-2019-17012, CVE-2019-17016, CVE-2019-17017, CVE-2019-17022,\nCVE-2019-17024, CVE-2019-17026)\n\nIt was discovered that NSS incorrectly handled certain memory operations.\nA remote attacker could potentially exploit this to cause a denial of\nservice, or execute arbitrary code. (CVE-2019-11745)\n","status":"published","published":"2020-01-16T17:09:22Z","modified":"2026-04-22T10:01:37.315315Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4335-1","title":"thunderbird vulnerabilities","description":"Multiple security issues were discovered in Thunderbird. If a user were\ntricked in to opening a specially crafted website in a browsing context,\nan attacker could potentially exploit these to cause a denial of service,\nobtain sensitive information, bypass security restrictions, bypass\nsame-origin restrictions, conduct cross-site scripting (XSS) attacks, or\nexecute arbitrary code. (CVE-2019-11757, CVE-2019-11758, CVE-2019-11759,\nCVE-2019-11760, CVE-2019-11761, CVE-2019-11762, CVE-2019-11763,\nCVE-2019-11764, CVE-2019-17005, CVE-2019-17008, CVE-2019-17010,\nCVE-2019-17011, CVE-2019-17012, CVE-2019-17016, CVE-2019-17017,\nCVE-2019-17022, CVE-2019-17024, CVE-2019-17026, CVE-2019-20503,\nCVE-2020-6798, CVE-2020-6800, CVE-2020-6805, CVE-2020-6806, CVE-2020-6807,\nCVE-2020-6812, CVE-2020-6814, CVE-2020-6819, CVE-2020-6820, CVE-2020-6821,\nCVE-2020-6825)\n\nIt was discovered that NSS incorrectly handled certain memory operations.\nA remote attacker could potentially exploit this to cause a denial of\nservice, or execute arbitrary code. (CVE-2019-11745)\n\nIt was discovered that a specially crafted S/MIME message with an inner\nencryption layer could be displayed as having a valid signature in some\ncircumstances, even if the signer had no access to the encrypted message.\nAn attacker could potentially exploit this to spoof the message author.\n(CVE-2019-11755)\n\nA heap overflow was discovered in the expat library in Thunderbird. If a\nuser were tricked in to opening a specially crafted message, an attacker\ncould potentially exploit this to cause a denial of service, or execute\narbitrary code. (CVE-2019-15903)\n\nIt was discovered that Message ID calculation was based on uninitialized\ndata. An attacker could potentially exploit this to obtain sensitive\ninformation. (CVE-2020-6792)\n\nMutiple security issues were discovered in Thunderbird. If a user were\ntricked in to opening a specially crafted message, an attacker could\npotentially exploit these to cause a denial of service, obtain sensitive\ninformation, or execute arbitrary code. (CVE-2020-6793, CVE-2020-6795,\nCVE-2020-6822)\n\nIt was discovered that if a user saved passwords before Thunderbird 60 and\nthen later set a primary password, an unencrypted copy of these passwords\nwould still be accessible. A local user could exploit this to obtain\nsensitive information. (CVE-2020-6794)\n\nIt was discovered that the Devtools’ ‘Copy as cURL’ feature did not\nfully escape website-controlled data. If a user were tricked in to using\nthe ‘Copy as cURL’ feature to copy and paste a command with specially\ncrafted data in to a terminal, an attacker could potentially exploit this\nto execute arbitrary commands via command injection. (CVE-2020-6811)\n","status":"published","published":"2020-04-21T20:14:22Z","modified":"2026-04-27T15:48:45.185510058Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}