Skip to main content

Boteraser | Website and Server Security Solutions

🛡️ openSUSE-SU-2023:0278-1 — seamonkey (CVE-2023-4863)

⚪ Unknown ✅ No Known Exploit OSV
N/A
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

Security update for seamonkey

This update for seamonkey fixes the following issues:

update to SeaMonkey 2.53.17.1

  • Upstream libwebp security fix bug 1852749.
  • CVE-2023-4863: Heap buffer overflow in libwebp bug 1852649.
  • Fix bad string encoded in ansi. l10n fr problem only bug 1847887.
  • SeaMonkey 2.53.17 uses the same backend as Firefox and contains

the relevant Firefox 60.8 security fixes.

  • SeaMonkey 2.53.17 shares most parts of the mail and news code with

Thunderbird. Please read the Thunderbird 60.8.0 release notes for

specific security fixes in this release.

  • Additional important security fixes up to Current Firefox 115.3

and Thunderbird 115.3 ESR plus many enhancements have been

backported. We will continue to enhance SeaMonkey security in

subsequent 2.53.x beta and release versions as fast as we are able

to.

update to SeaMonkey 2.53.17

  • Fix macOS Contacts permission request bug 1826719.
  • Remove SeaMonkey 2.57 links from debugQA bug 1829683.
  • Treat opening urls from the library as external bug 1619108.
  • Disable spam warning for autogenerated links in plaintext messages

bug 619031.

  • Switch SeaMonkey build files to Python 3 bug 1635849.
  • Remove empty overlays from Composer bug 1828533.
  • Move xpfe autocomplete to comm-central suite bug 1418512.
  • Remove nsIPrefBranch2 and nsIPrefBranchInternal bug 1374847.
  • SeaMonkey 2.53.17 uses the same backend as Firefox and contains

the relevant Firefox 60.8 security fixes.

  • SeaMonkey 2.53.17 shares most parts of the mail and news code with

Thunderbird. Please read the Thunderbird 60.8.0 release notes for

specific security fixes in this release.

  • Additional important security fixes up to Current Firefox 102.11

and Thunderbird 102.11 ESR plus many enhancements have been

backported. We will continue to enhance SeaMonkey security in

subsequent 2.53.x beta and release versions as fast as we are able

to.

Update to SeaMonkey 2.53.16

  • No throbber in plaintext editor bug 85498.
  • Remove unused gridlines class from EdAdvancedEdit bug 1806632.
  • Remove ESR 91 links from debugQA bug 1804534.
  • Rename devtools/shim to devtools/startup bug 1812367.
  • Remove unused seltype=text|cell css bug 1806653.
  • Implement new shared tree styling bug 1807802.
  • Use win.focus() in macWindowMenu.js bug 1807817.
  • Remove WCAP provider bug 1579020.
  • Remove ftp/file tree view support bug 1239239.
  • Change calendar list tree to a list bug 1561530.
  • Various other updates to the calendar code.
  • Continue the switch from Python 2 to Python 3 in the build system.
  • Verified compatibility with Rust 1.66.1.
  • SeaMonkey 2.53.16 uses the same backend as Firefox and contains

the relevant Firefox 60.8 security fixes.

  • SeaMonkey 2.53.16 shares most parts of the mail and news code with

Thunderbird. Please read the Thunderbird 60.8.0 release notes for

specific security fixes in this release.

  • Additional important security fixes up to Current Firefox 102.9

and Thunderbird 102.9 ESR plus many enhancements have been

backported. We will continue to enhance SeaMonkey security in

subsequent 2.53.x beta and release versions as fast as we are able

to.

Update to SeaMonkey 2.53.15

  • Microtasks and promises bug 1193394.
  • Implement queueMicrotask()bug 1480236.
  • Remove old synchronous contentPrefService from the tree bug 886907

and bug 1392929.

  • Remove remaining uses of 'general.useragent.locale' bug 1410736

and bug 1410738.

  • Migrate to intl.locale.requested.locale list from

'general.useragent.locale' bug 1441016.

  • Introduce a pref to store BCP47 locale list bug 1414390, bug

1423532 and bug 1441026.

  • Remove synchronous certificate verification APIs from

nsIX509CertDB bug 1453741 and bug 1453778.

  • Taskbar preview's favicon appears blank bug 1475524.
  • Call Imagelibs decodeImageAsyncWindows using a callback bug

1790695.

  • Remove PermissionsService from process Windows sandboxing code bug

1788233, bug 1789782 and bug 1794394.

  • Security info dialog doesn't show cert status anymore bug 1293378.
  • Replace nsIPlatfromCharset in mailnews bug 1381762.
  • Replace use of nsMsgI18NFileSystemCharset() with

NS_CopyUnicodeToNative/NS_CopyNativeToUnicode() bug 1506422.

  • Cater for Outlook's/Hotmail's 'Deleted' folder bug 1320191.
  • Make some filter methods scriptable bug 1497513.
  • Fix crash in nsMsgFilterAfterTheFact::ApplyFilter() caused by

async reset of 'm_curFolder' bug 537017.

  • Localize messages from nsIMsgFolder.logRuleHitFail() bug 1352731.
  • Add logging of message filter runs and actions bug 697522.
  • Check that we got a non-null header before running a filter on it

(and crashing) bug 1563959.

  • With CONDSTORE, eliminate unneeded flag fetches at startup bug

1428097.

  • Fix so custom tags (keywords) are visible to all users bug 583677.
  • Improve handling of

Affected software

openSUSE-SU-2023:0278-1 is recorded against 1 package.

  • seamonkey (fixed in 2.53.17.1-bp155.2.3.1)

Timeline and source

Published on 2 October 2023 and last revised on 4 February 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

lists.opensuse.org (Advisory)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
www.suse.com (Web)

Details

Severity Unknown
CVSS Score N/A
CVSS Vector N/A
CWE N/A
Public Exploit ✅ No
Source OSV
Published 2023-10-02
Updated 2026-08-20
Modified 2026-02-04
Fix URL N/A

Affected Packages

Software From version Fixed in
seamonkey 2.53.17.1-bp155.2.3.1

Similar Threats

Free Vulnerability Check

Is your site affected by openSUSE-SU-2023:0278-1?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against openSUSE-SU-2023:0278-1 and other known CVE records.

Scan My Site Free →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.