{"id":"CVE-2023-44488","aliases":["ALSA-2023:5537","ALSA-2023:5539","ALSA-2023:6187","ALSA-2023:6188","ALSA-2023:6191","ALSA-2023:6194","AZL-30066","DEBIAN-CVE-2023-44488","DLA-3598-1","DSA-5518-1","EUVD-2023-48823","GHSA-wc24-pw3j-j6vw","JLSEC-2026-374","MGASA-2023-0338","OESA-2023-1740","OESA-2024-1514","RHSA-2023:5534","RHSA-2023:5535","RHSA-2023:5536","RHSA-2023:5537","RHSA-2023:5538","RHSA-2023:5539","RHSA-2023:5540","RHSA-2023:6162","RHSA-2023:6185","RHSA-2023:6186","RHSA-2023:6187","RHSA-2023:6188","RHSA-2023:6189","RHSA-2023:6190","RHSA-2023:6191","RHSA-2023:6192","RHSA-2023:6194","RHSA-2023:6195","RHSA-2023:6196","RHSA-2023:6197","RHSA-2023:6198","RHSA-2023:6199","RLSA-2023:5537","RLSA-2023:6188","SUSE-SU-2024:2409-1","UBUNTU-CVE-2023-44488","USN-6403-1","USN-6403-2","USN-6403-3"],"status":"published","title":"VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.","description":"VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.0216,"percentile":0.82448,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-755"],"published":"2023-09-30T00:00:00Z","modified":"2026-10-29T11:31:56Z","fixes":[{"ecosystem":"Azure Linux:2","package":"libvpx","fixed_in":["1.13.1-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libvpx","fixed_in":["1.12.0-1+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libvpx","fixed_in":["1.12.0-1.2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libvpx","fixed_in":["1.12.0-1.2"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"libvpx","fixed_in":["1.9.0-1+deb11u2"],"sources":["osv"]},{"ecosystem":"Julia","package":"LibVPX_jll","fixed_in":["1.15.2+0"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"libvpx","fixed_in":["1.12.0-1.2.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"firefox","fixed_in":["79.0-18.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"firefox","fixed_in":["79.0-18.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"firefox","fixed_in":["102.15.0-6.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"firefox","fixed_in":["102.15.0-6.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"firefox","fixed_in":["102.15.0-6.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"firefox","fixed_in":["102.15.0-6.oe2203sp3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox","fixed_in":["0:115.4.0-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debuginfo","fixed_in":["0:115.4.0-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debugsource","fixed_in":["0:115.4.0-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"firefox","fixed_in":["0:115.4.0-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"firefox-debuginfo","fixed_in":["0:115.4.0-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"firefox-debugsource","fixed_in":["0:115.4.0-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"firefox","fixed_in":["0:115.4.0-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"firefox-debuginfo","fixed_in":["0:115.4.0-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"firefox-debugsource","fixed_in":["0:115.4.0-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"thunderbird","fixed_in":["0:115.4.1-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"thunderbird-debuginfo","fixed_in":["0:115.4.1-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"thunderbird-debugsource","fixed_in":["0:115.4.1-1.el9_0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libvpx","fixed_in":["1.5.0-2ubuntu1.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libvpx","fixed_in":["1.7.0-3ubuntu0.18.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"firefox","fixed_in":["118.0.1+build1-0ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libvpx","fixed_in":["1.8.2-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libvpx","fixed_in":["1.11.0-2ubuntu2.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libvpx","fixed_in":["1.12.0-1ubuntu2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-10.el8_8.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libvpx-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-10.el8_8.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-7.el9_2.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libvpx-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-7.el9_2.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.4.0-1.el8_8.alma.1"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.4.0-1.el9_2.alma.1"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.4.0-1.el9_2.alma.1"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.4.1-1.el9_2.alma"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.4.1-1.el8_8.alma.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Azure Linux:2","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-1+deb12u2"}]}],"versions":["1.12.0-1","1.12.0-1+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-1.2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-1.2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-3+deb10u2"}]}],"versions":["1.7.0-3","1.7.0-3+deb10u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-1+deb11u2"}]}],"versions":["1.9.0-1","1.9.0-1+deb11u1"]},{"source":"osv","ecosystem":"Debian:12","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-1+deb12u2"}]}],"versions":["1.12.0-1","1.12.0-1+deb12u1"]},{"source":"osv","ecosystem":"Julia","package":"LibVPX_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.15.2+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-1.2.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-10.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-10.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-10.oe2203sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-10.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-10.oe2203sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"79.0-18.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"79.0-18.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.0-6.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.0-6.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.0-6.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.0-6.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libvpx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libvpx-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libvpx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libvpx-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libvpx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libvpx-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"libvpx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"libvpx-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libvpx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libvpx-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libvpx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libvpx-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libvpx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libvpx-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvpx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvpx-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libvpx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libvpx-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libvpx-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libvpx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libvpx-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"libvpx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"libvpx-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"libvpx-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-7.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-7.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libvpx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-7.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libvpx-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-7.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-7.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libvpx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-7.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libvpx-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-7.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libvpx-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-7.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-7.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-7.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libvpx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-7.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libvpx-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-7.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-7.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"libvpx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-7.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"libvpx-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-7.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"libvpx-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-7.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.1-1.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-10.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115.4.0-1.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150400.3.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150400.3.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150400.3.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150400.3.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150400.3.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150400.3.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150400.3.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150400.3.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150400.3.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150400.3.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150400.3.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150400.3.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.0-2","1.3.0-1","1.3.0-2","1.3.0-2ubuntu0.1~esm1","1.3.0-2ubuntu0.1~esm2","1.3.0-2ubuntu0.1~esm3","1.3.0-2ubuntu0.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-2ubuntu1.1+esm2"}]}],"versions":["1.4.0-4","1.5.0-2","1.5.0-2ubuntu1","1.5.0-2ubuntu1.1","1.5.0-2ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-3ubuntu0.18.04.1+esm1"}]}],"versions":["1.6.1-3","1.7.0-3","1.7.0-3ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.3.1-0ubuntu3","52.3.1-7fakesync1","52.8.1-0ubuntu0.18.04.1","52.9.1-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs38","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["38.8.0~repack1-0ubuntu1","38.8.0~repack1-0ubuntu3","38.8.0~repack1-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"118.0.1+build1-0ubuntu0.20.04.1"}]}],"versions":["69.0.3+build1-0ubuntu1","70.0+build2-0ubuntu1","70.0+build2-0ubuntu2","70.0.1+build1-0ubuntu2","71.0+build2-0ubuntu2","71.0+build5-0ubuntu1","72.0.1+build1-0ubuntu1","72.0.2+build1-0ubuntu1","73.0+build1-0ubuntu1","73.0+build2-0ubuntu1","73.0+build3-0ubuntu1","73.0.1+build1-0ubuntu1","74.0+build1-0ubuntu1","74.0+build2-0ubuntu1","74.0+build2-0ubuntu2","74.0+build3-0ubuntu1","75.0+build3-0ubuntu1","76.0+build2-0ubuntu0.20.04.1","76.0.1+build1-0ubuntu0.20.04.1","77.0.1+build1-0ubuntu0.20.04.1","78.0.1+build1-0ubuntu0.20.04.1","78.0.2+build2-0ubuntu0.20.04.1","79.0+build1-0ubuntu0.20.04.1","80.0+build2-0ubuntu0.20.04.1","80.0.1+build1-0ubuntu0.20.04.1","81.0+build2-0ubuntu0.20.04.1","81.0.2+build1-0ubuntu0.20.04.1","82.0+build2-0ubuntu0.20.04.1","82.0.2+build1-0ubuntu0.20.04.1","82.0.3+build1-0ubuntu0.20.04.1","83.0+build2-0ubuntu0.20.04.1","84.0+build3-0ubuntu0.20.04.1","84.0.1+build1-0ubuntu0.20.04.1","84.0.2+build1-0ubuntu0.20.04.1","85.0+build1-0ubuntu0.20.04.1","85.0.1+build1-0ubuntu0.20.04.1","86.0+build3-0ubuntu0.20.04.1","86.0.1+build1-0ubuntu0.20.04.1","87.0+build3-0ubuntu0.20.04.2","88.0+build2-0ubuntu0.20.04.1","88.0.1+build1-0ubuntu0.20.04.2","89.0+build2-0ubuntu0.20.04.2","89.0.1+build1-0ubuntu0.20.04.1","89.0.2+build1-0ubuntu0.20.04.1","90.0+build1-0ubuntu0.20.04.1","90.0.2+build1-0ubuntu0.20.04.1","91.0+build2-0ubuntu0.20.04.1","91.0.1+build1-0ubuntu0.20.04.1","91.0.2+build1-0ubuntu0.20.04.1","92.0+build3-0ubuntu0.20.04.1","93.0+build1-0ubuntu0.20.04.1","94.0+build3-0ubuntu0.20.04.1","95.0+build1-0ubuntu0.20.04.1","95.0.1+build2-0ubuntu0.20.04.1","96.0+build2-0ubuntu0.20.04.1","97.0+build2-0ubuntu0.20.04.1","97.0.2+build1-0ubuntu0.20.04.1","98.0+build3-0ubuntu0.20.04.2","98.0.1+build2-0ubuntu0.20.04.1","98.0.2+build1-0ubuntu0.20.04.1","99.0+build2-0ubuntu0.20.04.2","100.0+build2-0ubuntu0.20.04.1","100.0.2+build1-0ubuntu0.20.04.1","101.0.1+build1-0ubuntu0.20.04.1","102.0+build2-0ubuntu0.20.04.1","103.0+build1-0ubuntu0.20.04.1","104.0+build3-0ubuntu0.20.04.1","105.0+build2-0ubuntu0.20.04.1","106.0.2+build1-0ubuntu0.20.04.1","106.0.5+build1-0ubuntu0.20.04.1","107.0+build2-0ubuntu0.20.04.1","108.0+build2-0ubuntu0.20.04.1","108.0.1+build1-0ubuntu0.20.04.1","108.0.2+build1-0ubuntu0.20.04.1","109.0+build2-0ubuntu0.20.04.1","109.0.1+build1-0ubuntu0.20.04.2","110.0+build3-0ubuntu0.20.04.1","110.0.1+build2-0ubuntu0.20.04.1","111.0+build2-0ubuntu0.20.04.1","111.0.1+build2-0ubuntu0.20.04.1","112.0+build2-0ubuntu0.20.04.1","112.0.1+build1-0ubuntu0.20.04.1","112.0.2+build1-0ubuntu0.20.04.1","113.0+build2-0ubuntu0.20.04.1","113.0.1+build1-0ubuntu0.20.04.1","113.0.2+build1-0ubuntu0.20.04.1","114.0+build3-0ubuntu0.20.04.1","114.0.1+build1-0ubuntu0.20.04.1","114.0.2+build1-0ubuntu0.20.04.1","115.0+build2-0ubuntu0.20.04.3","115.0.2+build1-0ubuntu0.20.04.1","116.0+build2-0ubuntu0.20.04.2","116.0.2+build1-0ubuntu0.20.04.1","116.0.3+build2-0ubuntu0.20.04.1","117.0+build2-0ubuntu0.20.04.1","117.0.1+build2-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-1ubuntu0.2"}]}],"versions":["1.8.1-2","1.8.2-1","1.8.2-1build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs68","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["68.5.0-1~fakesync","68.5.0-2~fakesync","68.6.0-1","68.6.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.9.1-1build1","52.9.1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-2ubuntu2.2"}]}],"versions":["1.9.0-1ubuntu1","1.11.0-2ubuntu1","1.11.0-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.11.0-0ubuntu0.22.04.1","102.12.0-0ubuntu0.22.04.1","102.13.0-0ubuntu0.22.04.1","102.15.1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs78","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["78.13.0-1","78.15.0-2","78.15.0-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["91.5.1-0ubuntu1","91.6.0-1","91.6.0-2","91.7.0-2","91.10.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-1ubuntu2"}]}]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.15.1-1","102.15.1-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-1ubuntu0.2"}]}],"versions":["1.8.1-2","1.8.2-1","1.8.2-1build1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-2ubuntu2.2"}]}],"versions":["1.9.0-1ubuntu1","1.11.0-2ubuntu1","1.11.0-2ubuntu2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-3ubuntu0.18.04.1+esm1"}]}],"versions":["1.6.1-3","1.7.0-3","1.7.0-3ubuntu0.18.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-2ubuntu1.1+esm2"}]}],"versions":["1.4.0-4","1.5.0-2","1.5.0-2ubuntu1","1.5.0-2ubuntu1.1","1.5.0-2ubuntu1.1+esm1"],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"webmproject","product":"libvpx"}],"references":[{"url":"https://github.com/webmproject/libvpx/commit/df9fd9d5b7325060b2b921558a1eb20ca7880937","tags":["x_transferred","Patch","fix","web"]},{"url":"https://github.com/webmproject/libvpx/commit/263682c9a29395055f3b3afe2d97be1828a6223f","tags":["x_transferred","Patch","fix","web"]},{"url":"https://github.com/webmproject/libvpx/compare/v1.13.0...v1.13.1","tags":["x_transferred","Patch","web"]},{"url":"https://github.com/webmproject/libvpx/releases/tag/v1.13.1","tags":["x_transferred","Release Notes","web"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/30/4","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00001.html","tags":["mailing-list","x_transferred","Mailing List","article","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241806","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","report","web"]},{"url":"https://security.gentoo.org/glsa/202310-04","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.debian.org/security/2023/dsa-5518","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44488","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/"},{"url":"https://github.com/advisories/GHSA-wc24-pw3j-j6vw"},{"url":"https://access.redhat.com/errata/RHSA-2023:5537","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-44488","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5217","tags":["report"]},{"url":"https://bugzilla.redhat.com/2241191","tags":["report"]},{"url":"https://bugzilla.redhat.com/2241806","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-5537.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5539","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-5539.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6187","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5721","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5724","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5725","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5728","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5730","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5732","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245896","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245898","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245899","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245900","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245903","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245906","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-6187.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6188","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6188.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6191","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6191.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6194","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-6194.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/44xxx/CVE-2023-44488.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-44488","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0338.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32586","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2023/09/30/4","tags":["web","report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1740","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5217","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1514","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5534","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241191","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5534.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5217","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-44488","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5535","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5535.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5536","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5536.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5537.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5538","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5538.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5539.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5540","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5540.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6162","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245906","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6162.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5721","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5721","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-46/#CVE-2023-5721","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-47/#CVE-2023-5721","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5724","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5724","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-46/#CVE-2023-5724","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-47/#CVE-2023-5724","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5725","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5725","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-46/#CVE-2023-5725","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-47/#CVE-2023-5725","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5728","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5728","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-46/#CVE-2023-5728","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-47/#CVE-2023-5728","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5730","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5730","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-46/#CVE-2023-5730","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-47/#CVE-2023-5730","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5732","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5732","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-46/#CVE-2023-5732","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-47/#CVE-2023-5732","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6185","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6185.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6186","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6186.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6187.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6188.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6189","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6189.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6190","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6190.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6191.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6192","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6192.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6194.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6195","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6195.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6196","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6196.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6197","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6197.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6198","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6198.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6199","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6199.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:5537","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:6188","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242409-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1216879","tags":["report"]},{"url":"https://bugzilla.suse.com/1225403","tags":["report"]},{"url":"https://bugzilla.suse.com/1225879","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-44488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5197","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-44488","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6403-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6403-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6403-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-5217","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-44488","description":"VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.","status":"published","published":"2023-09-30T00:00:00Z","modified":"2024-09-23T16:15:31.069Z","updated_at":"2026-11-02T14:35:21.612665Z"}],"euvd":[{"id":"EUVD-2023-48823","description":"VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.","status":"published","published":"2023-09-30T00:00:00Z","modified":"2024-09-23T16:15:31Z","updated_at":"2026-11-03T00:28:16.94122Z"}],"ghsa":[{"id":"GHSA-wc24-pw3j-j6vw","title":"VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.","description":"VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.","status":"published","published":"2023-09-30T21:31:48Z","modified":"2023-11-24T05:05:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:55:05.78804Z"}],"nvd":[{"id":"CVE-2023-44488","description":"VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.","status":"published","published":"2023-09-30T20:15:10.2Z","modified":"2026-06-17T06:27:44.793Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:08:35.022405Z"}],"osv":[{"id":"AZL-30066","title":"CVE-2023-44488 affecting package libvpx for versions less than 1.13.1-1","description":"VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.","status":"published","published":"2023-09-30T20:15:10Z","modified":"2026-04-21T04:26:03.729185Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"DEBIAN-CVE-2023-44488","description":"VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.","status":"published","published":"2023-09-30T20:15:10.2Z","modified":"2026-10-26T18:02:58.30376401Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"JLSEC-2026-374","description":"VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.","status":"published","published":"2026-05-01T13:54:10.329Z","modified":"2026-07-18T00:01:54.031350451Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2023-1740","title":"libvpx security update","description":"libvpx provides the VP8/VP9 SDK, which allows you to integrate your applications with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide.\r\n\r\nSecurity Fix(es):\r\n\r\nVP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.(CVE-2023-44488)\r\n\r\nHeap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)(CVE-2023-5217)","status":"published","published":"2023-10-13T11:06:11Z","modified":"2026-08-18T01:17:55.145019073Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2024-1514","title":"firefox security update","description":"Mozilla Firefox is a standalone web browser, designed for standards compliance and performance.  Its functionality can be enhanced via a plethora of extensions.\r\n\r\nSecurity Fix(es):\r\n\r\nVP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.(CVE-2023-44488)","status":"published","published":"2024-04-26T11:06:57Z","modified":"2026-08-18T01:18:24.783551842Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"RHSA-2023:5534","title":"Red Hat Security Advisory: libvpx security update","status":"published","published":"2024-09-16T14:03:30Z","modified":"2026-03-18T11:33:12.43345Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5535","title":"Red Hat Security Advisory: libvpx security update","status":"published","published":"2024-09-17T01:29:59Z","modified":"2026-03-18T11:32:58.502846Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5536","title":"Red Hat Security Advisory: libvpx security update","status":"published","published":"2024-09-16T14:01:00Z","modified":"2026-03-18T11:32:58.903023Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5537","title":"Red Hat Security Advisory: libvpx security update","status":"published","published":"2024-09-17T01:30:10Z","modified":"2026-06-26T12:22:19.679553128Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5538","title":"Red Hat Security Advisory: libvpx security update","status":"published","published":"2024-09-16T14:06:58Z","modified":"2026-06-26T12:22:19.650628075Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5539","title":"Red Hat Security Advisory: libvpx security update","status":"published","published":"2024-09-16T14:04:57Z","modified":"2026-06-26T12:22:21.231823902Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5540","title":"Red Hat Security Advisory: libvpx security update","status":"published","published":"2024-09-16T14:00:20Z","modified":"2026-06-26T12:22:19.595664743Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6162","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T15:13:56Z","modified":"2026-06-26T11:08:16Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6185","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T15:15:29Z","modified":"2026-03-18T11:33:24.198318Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6186","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T15:14:57Z","modified":"2026-03-18T11:33:26.333257Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6187","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T15:15:18Z","modified":"2026-03-18T11:30:15.472334Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6188","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T15:14:47Z","modified":"2026-03-18T11:33:25.917465Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6189","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T15:14:07Z","modified":"2026-03-18T11:33:27.263333Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6190","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T14:03:06Z","modified":"2026-03-18T11:33:28.071549Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6191","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T15:14:27Z","modified":"2026-03-18T11:33:25.17658Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6192","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T13:58:51Z","modified":"2026-03-18T11:33:26.317305Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6194","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T15:14:37Z","modified":"2026-03-18T11:33:26.283245Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6195","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-17T00:24:19Z","modified":"2026-03-18T11:33:29.682798Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6196","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T15:15:08Z","modified":"2026-03-18T11:33:27.217609Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6197","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T15:14:06Z","modified":"2026-03-18T11:33:27.287239Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6198","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T15:14:17Z","modified":"2026-03-18T11:33:30.409752Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6199","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T15:13:57Z","modified":"2026-03-18T11:33:26.381466Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RLSA-2023:5537","title":"Important: libvpx security update","description":"The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.\n\nSecurity Fix(es):\n\n* libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)\n\n* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-03-18T06:01:13.733535Z","modified":"2026-03-18T08:00:04.540697Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2023-44488","description":"VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.","status":"published","published":"2023-10-02T00:00:00Z","modified":"2026-04-22T14:12:26.32912Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"ALSA-2023:5537","title":"Important: libvpx security update","description":"The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.\n\nSecurity Fix(es):\n\n* libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)\n* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-10-09T00:00:00Z","modified":"2026-10-29T11:02:10.842318041Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:5539","title":"Important: libvpx security update","description":"The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.\n\nSecurity Fix(es):\n\n* libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)\n* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-10-09T00:00:00Z","modified":"2026-10-29T11:31:56.307999342Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:6187","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 115.4.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)\n* Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730)\n* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)\n* Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)\n* Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)\n* Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728)\n* Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-10-30T00:00:00Z","modified":"2026-10-29T11:02:19.304271533Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:6188","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 115.4.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)\n* Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730)\n* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)\n* Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)\n* Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)\n* Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728)\n* Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-10-30T00:00:00Z","modified":"2026-10-29T11:31:31.492181705Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:6191","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 115.4.1.\n\nSecurity Fix(es):\n\n* Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)\n* Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730)\n* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)\n* Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)\n* Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)\n* Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728)\n* Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-10-30T00:00:00Z","modified":"2026-10-29T11:30:59.022169849Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:6194","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 115.4.1.\n\nSecurity Fix(es):\n\n* Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)\n* Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730)\n* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)\n* Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)\n* Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)\n* Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728)\n* Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-10-30T00:00:00Z","modified":"2026-10-29T11:02:19.319395373Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CVE-2023-44488","description":"VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.","status":"published","published":"2023-09-30T00:00:00Z","modified":"2026-10-28T10:39:01.853027271Z","updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"DLA-3598-1","title":"libvpx - security update","status":"published","published":"2023-10-01T00:00:00Z","modified":"2026-03-09T01:22:25.425713Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5518-1","title":"libvpx - security update","status":"published","published":"2023-10-05T00:00:00Z","modified":"2026-03-09T02:10:47.261246Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2023-0338","title":"Updated libvpx packages fix a security vulnerability","description":"The updated packages fix a security vulnerability\n\nVP9 in libvpx before 1.13.1 mishandles widths, leading to a crash\nrelated to encoding. (CVE-2023-44488)\n","status":"published","published":"2023-12-04T08:28:24Z","modified":"2026-04-16T04:43:15.43247174Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"RLSA-2023:6188","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 115.4.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)\n\n* Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730)\n\n* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)\n\n* Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)\n\n* Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)\n\n* Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728)\n\n* Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-11-11T23:00:15.383639Z","modified":"2026-02-05T02:45:08.529277Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2024:2409-1","title":"Security update for libvpx","description":"This update for libvpx fixes the following issues:\n\n- CVE-2024-5197: Fixed interger overflow when calling vpx_img_alloc() or vpx_img_wrap() with large parameters (bsc#1225879).\n- CVE-2023-6349: Fixed heap overflow when encoding a frame that has larger dimensions than the originally configured size (bsc#1225403).\n- CVE-2023-44488: Fixed heap buffer overflow in vp8 encoding (bsc#1216879).\n","status":"published","published":"2024-07-11T11:55:25Z","modified":"2026-02-04T02:56:04.533845Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"USN-6403-1","title":"libvpx vulnerabilities","description":"It was discovered that libvpx did not properly handle certain malformed\nmedia files. If an application using libvpx opened a specially crafted\nfile, a remote attacker could cause a denial of service, or possibly\nexecute arbitrary code.\n","status":"published","published":"2023-10-02T16:47:37Z","modified":"2026-04-27T17:02:12.550260668Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6403-2","title":"libvpx vulnerabilities","description":"USN-6403-1 fixed several vulnerabilities in libvpx. This update provides\nthe corresponding update for Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that libvpx did not properly handle certain malformed\n media files. If an application using libvpx opened a specially crafted\n file, a remote attacker could cause a denial of service, or possibly\n execute arbitrary code.\n","status":"published","published":"2023-10-23T15:46:57Z","modified":"2026-04-27T17:02:18.12215326Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6403-3","title":"libvpx vulnerabilities","description":"USN-6403-1 fixed several vulnerabilities in libvpx. This update provides\nthe corresponding update for Ubuntu 16.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that libvpx did not properly handle certain malformed\n media files. If an application using libvpx opened a specially crafted\n file, a remote attacker could cause a denial of service, or possibly\n execute arbitrary code.\n","status":"published","published":"2023-11-01T09:29:41Z","modified":"2026-06-25T13:32:22.684576572Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}