<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for MozillaFirefox</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2023:0111-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2023-01-20T09:19:36Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2023-01-20T09:19:36Z</InitialReleaseDate>
    <CurrentReleaseDate>2023-01-20T09:19:36Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for MozillaFirefox</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for MozillaFirefox fixes the following issues:

- Updated to version 102.7.0 ESR (bsc#1207119):
  - CVE-2022-46871: Updated an out of date library (libusrsctp) which
    contained several vulnerabilities.
  - CVE-2023-23598: Fixed an arbitrary file read from GTK drag and
    drop on Linux.
  - CVE-2023-23601: Fixed a potential spoofing attack when dragging a
    URL from a cross-origin iframe into the same tab.
  - CVE-2023-23602: Fixed a mishandled security check, which caused
    the Content Security Policy header to be ignored for WebSockets
    in WebWorkers.
  - CVE-2022-46877: Fixed a fullscreen notification bypass which
    could be leveraged in spoofing attacks.
  - CVE-2023-23603: Fixed a Content Security Policy bypass via format
    directives.
  - CVE-2023-23605: Fixed several memory safety bugs.
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2023-111,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2023-111,SUSE-2023-111,SUSE-OpenStack-Cloud-9-2023-111,SUSE-OpenStack-Cloud-Crowbar-9-2023-111,SUSE-SLE-SAP-12-SP4-2023-111,SUSE-SLE-SDK-12-SP5-2023-111,SUSE-SLE-SERVER-12-SP2-BCL-2023-111,SUSE-SLE-SERVER-12-SP4-LTSS-2023-111,SUSE-SLE-SERVER-12-SP5-2023-111</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20230111-1/</URL>
      <Description>Link for SUSE-SU-2023:0111-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2023-January/013492.html</URL>
      <Description>E-Mail link for SUSE-SU-2023:0111-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1207119</URL>
      <Description>SUSE Bug 1207119</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-46871/</URL>
      <Description>SUSE CVE CVE-2022-46871 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-46877/</URL>
      <Description>SUSE CVE CVE-2022-46877 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-23598/</URL>
      <Description>SUSE CVE CVE-2023-23598 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-23601/</URL>
      <Description>SUSE CVE CVE-2023-23601 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-23602/</URL>
      <Description>SUSE CVE CVE-2023-23602 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-23603/</URL>
      <Description>SUSE CVE CVE-2023-23603 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-23605/</URL>
      <Description>SUSE CVE CVE-2023-23605 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="Image SLES12-SP5-SAP-Azure-LI-BYOS-Production">
      <Branch Type="Product Name" Name="Image SLES12-SP5-SAP-Azure-LI-BYOS-Production">
        <FullProductName ProductID="Image SLES12-SP5-SAP-Azure-LI-BYOS-Production">Image SLES12-SP5-SAP-Azure-LI-BYOS-Production</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production">
      <Branch Type="Product Name" Name="Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production">
        <FullProductName ProductID="Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production">Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP2-BCL">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP2-BCL">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-BCL" CPE="cpe:/o:suse:sles-bcl:12:sp2">SUSE Linux Enterprise Server 12 SP2-BCL</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP4-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS" CPE="cpe:/o:suse:sles-ltss:12:sp4">SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP5">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5" CPE="cpe:/o:suse:sles:12:sp5">SUSE Linux Enterprise Server 12 SP5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4" CPE="cpe:/o:suse:sles_sap:12:sp4">SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5" CPE="cpe:/o:suse:sles_sap:12:sp5">SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Software Development Kit 12 SP5">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Software Development Kit 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP5" CPE="cpe:/o:suse:sle-sdk:12:sp5">SUSE Linux Enterprise Software Development Kit 12 SP5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud 9">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud 9">
        <FullProductName ProductID="SUSE OpenStack Cloud 9" CPE="cpe:/o:suse:suse-openstack-cloud:9">SUSE OpenStack Cloud 9</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud Crowbar 9">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud Crowbar 9">
        <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9" CPE="cpe:/o:suse:suse-openstack-cloud-crowbar:9">SUSE OpenStack Cloud Crowbar 9</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-102.7.0-112.145.1">
      <FullProductName ProductID="MozillaFirefox-102.7.0-112.145.1">MozillaFirefox-102.7.0-112.145.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-branding-upstream-102.7.0-112.145.1">
      <FullProductName ProductID="MozillaFirefox-branding-upstream-102.7.0-112.145.1">MozillaFirefox-branding-upstream-102.7.0-112.145.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-devel-102.7.0-112.145.1">
      <FullProductName ProductID="MozillaFirefox-devel-102.7.0-112.145.1">MozillaFirefox-devel-102.7.0-112.145.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-translations-common-102.7.0-112.145.1">
      <FullProductName ProductID="MozillaFirefox-translations-common-102.7.0-112.145.1">MozillaFirefox-translations-common-102.7.0-112.145.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-translations-other-102.7.0-112.145.1">
      <FullProductName ProductID="MozillaFirefox-translations-other-102.7.0-112.145.1">MozillaFirefox-translations-other-102.7.0-112.145.1</FullProductName>
    </Branch>
    <Relationship ProductReference="MozillaFirefox-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES12-SP5-SAP-Azure-LI-BYOS-Production">
      <FullProductName ProductID="Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.7.0-112.145.1">MozillaFirefox-102.7.0-112.145.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production">
      <FullProductName ProductID="Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.7.0-112.145.1">MozillaFirefox-102.7.0-112.145.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-102.7.0-112.145.1">MozillaFirefox-102.7.0-112.145.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-102.7.0-112.145.1">MozillaFirefox-devel-102.7.0-112.145.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-102.7.0-112.145.1">MozillaFirefox-translations-common-102.7.0-112.145.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-102.7.0-112.145.1">MozillaFirefox-102.7.0-112.145.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-devel-102.7.0-112.145.1">MozillaFirefox-devel-102.7.0-112.145.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-translations-common-102.7.0-112.145.1">MozillaFirefox-translations-common-102.7.0-112.145.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-102.7.0-112.145.1">MozillaFirefox-102.7.0-112.145.1 as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1">MozillaFirefox-devel-102.7.0-112.145.1 as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-102.7.0-112.145.1">MozillaFirefox-translations-common-102.7.0-112.145.1 as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-102.7.0-112.145.1">MozillaFirefox-102.7.0-112.145.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-devel-102.7.0-112.145.1">MozillaFirefox-devel-102.7.0-112.145.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-102.7.0-112.145.1">MozillaFirefox-translations-common-102.7.0-112.145.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-102.7.0-112.145.1">MozillaFirefox-102.7.0-112.145.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1">MozillaFirefox-devel-102.7.0-112.145.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-102.7.0-112.145.1">MozillaFirefox-translations-common-102.7.0-112.145.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1">MozillaFirefox-devel-102.7.0-112.145.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:MozillaFirefox-102.7.0-112.145.1">MozillaFirefox-102.7.0-112.145.1 as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:MozillaFirefox-devel-102.7.0-112.145.1">MozillaFirefox-devel-102.7.0-112.145.1 as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:MozillaFirefox-translations-common-102.7.0-112.145.1">MozillaFirefox-translations-common-102.7.0-112.145.1 as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-102.7.0-112.145.1">MozillaFirefox-102.7.0-112.145.1 as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-devel-102.7.0-112.145.1">MozillaFirefox-devel-102.7.0-112.145.1 as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-102.7.0-112.145.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-translations-common-102.7.0-112.145.1">MozillaFirefox-translations-common-102.7.0-112.145.1 as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited. This vulnerability affects Firefox &lt; 108.</Note>
    </Notes>
    <CVE>CVE-2022-46871</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>8.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20230111-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-46871.html</URL>
        <Description>CVE-2022-46871</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox &lt; 108.</Note>
    </Notes>
    <CVE>CVE-2022-46877</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>4.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20230111-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-46877.html</URL>
        <Description>CVE-2022-46877</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to &lt;code&gt;DataTransfer.setData&lt;/code&gt;. This vulnerability affects Firefox &lt; 109, Thunderbird &lt; 102.7, and Firefox ESR &lt; 102.7.</Note>
    </Notes>
    <CVE>CVE-2023-23598</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20230111-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-23598.html</URL>
        <Description>CVE-2023-23598</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks. This vulnerability affects Firefox &lt; 109, Thunderbird &lt; 102.7, and Firefox ESR &lt; 102.7.</Note>
    </Notes>
    <CVE>CVE-2023-23601</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20230111-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-23601.html</URL>
        <Description>CVE-2023-23601</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to connections to restricted origins from inside WebWorkers. This vulnerability affects Firefox &lt; 109, Thunderbird &lt; 102.7, and Firefox ESR &lt; 102.7.</Note>
    </Notes>
    <CVE>CVE-2023-23602</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.1</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20230111-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-23602.html</URL>
        <Description>CVE-2023-23602</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Regular expressions used to filter out forbidden properties and values from style directives in calls to &lt;code&gt;console.log&lt;/code&gt; weren't accounting for external URLs. Data could then be potentially exfiltrated from the browser. This vulnerability affects Firefox &lt; 109, Thunderbird &lt; 102.7, and Firefox ESR &lt; 102.7.</Note>
    </Notes>
    <CVE>CVE-2023-23603</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20230111-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-23603.html</URL>
        <Description>CVE-2023-23603</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR 102.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox &lt; 109, Thunderbird &lt; 102.7, and Firefox ESR &lt; 102.7.</Note>
    </Notes>
    <CVE>CVE-2023-23605</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-devel-102.7.0-112.145.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-translations-common-102.7.0-112.145.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>8.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20230111-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-23605.html</URL>
        <Description>CVE-2023-23605</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
