Oval Definition:oval:org.opensuse.security:def:1045
Revision Date:2021-11-19Version:1
Title:Security update for MozillaFirefox (Important)
Description:

This update for MozillaFirefox fixes the following issues:

MozillaFirefox was updated to Extended Support Release 91.3.0 ESR

Fixed: Various stability, functionality, and security fixes

MFSA 2021-49 (bsc#1192250)

* CVE-2021-38503: iframe sandbox rules did not apply to XSLT stylesheets * CVE-2021-38504: Use-after-free in file picker dialog * CVE-2021-38505: Windows 10 Cloud Clipboard may have recorded sensitive user data * CVE-2021-38506: Firefox could be coaxed into going into fullscreen mode without notification or warning * CVE-2021-38507: Opportunistic Encryption in HTTP2 could be used to bypass the Same-Origin-Policy on services hosted on other ports * CVE-2021-38508: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing * CVE-2021-38509: Javascript alert box could have been spoofed onto an arbitrary domain * CVE-2021-38510: Download Protections were bypassed by .inetloc files on Mac OS * MOZ-2021-0008: Use-after-free in HTTP2 Session object * MOZ-2021-0007: Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
Family:unixClass:patch
Status:Reference(s):1192250
CVE-2013-1990
CVE-2013-1999
CVE-2016-9964
CVE-2017-15098
CVE-2017-15098
CVE-2017-15099
CVE-2017-15099
CVE-2018-1052
CVE-2018-1052
CVE-2018-1053
CVE-2018-1053
CVE-2018-1058
CVE-2018-1058
CVE-2018-10915
CVE-2018-10915
CVE-2018-10925
CVE-2018-10925
CVE-2018-1115
CVE-2018-1115
CVE-2018-16850
CVE-2018-16850
CVE-2021-38503
CVE-2021-38504
CVE-2021-38505
CVE-2021-38506
CVE-2021-38507
CVE-2021-38508
CVE-2021-38509
CVE-2021-38510
SUSE-SU-2021:3745-1
Platform(s):openSUSE 13.2
SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 15 SP3
SUSE Linux Enterprise High Availability 15
SUSE Linux Enterprise High Performance Computing 15 SP3
SUSE Linux Enterprise Module for additional PackageHub packages 15
SUSE Linux Enterprise Module for Basesystem 15 SP3
SUSE Linux Enterprise Module for Desktop Applications 15
SUSE Linux Enterprise Module for Desktop Applications 15 SP3
SUSE Linux Enterprise Module for High Performance Computing 15
SUSE Linux Enterprise Module for Legacy Software 15
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Module for Web Scripting 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server for SAP Applications 15 SP3
SUSE Linux Enterprise Software Development Kit 11 SP2
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Storage 7.1
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise Workstation Extension 15
SUSE Manager Proxy 4.2
SUSE Manager Retail Branch Server 4.2
SUSE Manager Server 4.2
SUSE Package Hub for SUSE Linux Enterprise 12
SUSE Package Hub for SUSE Linux Enterprise 15
Product(s):
Definition Synopsis
  • SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed
  • AND Package Information
  • ruby2.1-rubygem-chef-10.32.2-3 is installed
  • OR rubygem-chef-10.32.2-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • bzip2-1.0.6-27 is installed
  • OR libbz2-1-1.0.6-27 is installed
  • OR libbz2-1-32bit-1.0.6-27 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • aaa_base-13.2+git20140911.61c1681-9 is installed
  • OR aaa_base-extras-13.2+git20140911.61c1681-9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • libxerces-c-3_1-3.1.1-12 is installed
  • OR libxerces-c-3_1-32bit-3.1.1-12 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed
  • AND Package Information
  • libXvMC-devel-1.0.10-1.23 is installed
  • OR libXvMC1-1.0.10-1.23 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 15 SP3 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
  • OR SUSE Linux Enterprise Module for Desktop Applications 15 SP3 is installed
  • OR SUSE Linux Enterprise Server 15 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
  • OR SUSE Linux Enterprise Storage 7.1 is installed
  • OR SUSE Manager Proxy 4.2 is installed
  • OR SUSE Manager Retail Branch Server 4.2 is installed
  • OR SUSE Manager Server 4.2 is installed
  • AND Package Information
  • MozillaFirefox-91.3.0-152.6.1 is installed
  • OR MozillaFirefox-devel-91.3.0-152.6.1 is installed
  • OR MozillaFirefox-translations-common-91.3.0-152.6.1 is installed
  • OR MozillaFirefox-translations-other-91.3.0-152.6.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 15 is installed
  • AND Package Information
  • cluster-md-kmp-default-4.12.14-25.3 is installed
  • OR dlm-kmp-default-4.12.14-25.3 is installed
  • OR gfs2-kmp-default-4.12.14-25.3 is installed
  • OR kernel-default-4.12.14-25.3 is installed
  • OR ocfs2-kmp-default-4.12.14-25.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed
  • AND Package Information
  • glib2-2.54.3-4.7 is installed
  • OR glib2-devel-32bit-2.54.3-4.7 is installed
  • OR glib2-tools-32bit-2.54.3-4.7 is installed
  • OR libgthread-2_0-0-32bit-2.54.3-4.7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Desktop Applications 15 is installed
  • AND python3-bottle-0.12.13-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for High Performance Computing 15 is installed
  • AND Package Information
  • libpmi0-17.11.7-6.3 is installed
  • OR libslurm32-17.11.7-6.3 is installed
  • OR perl-slurm-17.11.7-6.3 is installed
  • OR slurm-17.11.7-6.3 is installed
  • OR slurm-auth-none-17.11.7-6.3 is installed
  • OR slurm-config-17.11.7-6.3 is installed
  • OR slurm-devel-17.11.7-6.3 is installed
  • OR slurm-doc-17.11.7-6.3 is installed
  • OR slurm-lua-17.11.7-6.3 is installed
  • OR slurm-munge-17.11.7-6.3 is installed
  • OR slurm-node-17.11.7-6.3 is installed
  • OR slurm-pam_slurm-17.11.7-6.3 is installed
  • OR slurm-plugins-17.11.7-6.3 is installed
  • OR slurm-slurmdbd-17.11.7-6.3 is installed
  • OR slurm-sql-17.11.7-6.3 is installed
  • OR slurm-torque-17.11.7-6.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 15 is installed
  • AND Package Information
  • kernel-default-4.12.14-25.19 is installed
  • OR reiserfs-kmp-default-4.12.14-25.19 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-23-default-2-4 is installed
  • OR kernel-livepatch-SLE15_Update_0-2-4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed
  • AND Package Information
  • bluez-5.48-5.13 is installed
  • OR bluez-auto-enable-devices-5.48-5.13 is installed
  • OR bluez-test-5.48-5.13 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
  • AND Package Information
  • libsystemd0-mini-234-24.30 is installed
  • OR libudev-devel-32bit-234-24.30 is installed
  • OR libudev-mini-devel-234-24.30 is installed
  • OR libudev-mini1-234-24.30 is installed
  • OR nss-myhostname-234-24.30 is installed
  • OR nss-myhostname-32bit-234-24.30 is installed
  • OR nss-mymachines-234-24.30 is installed
  • OR nss-mymachines-32bit-234-24.30 is installed
  • OR nss-systemd-234-24.30 is installed
  • OR systemd-234-24.30 is installed
  • OR systemd-logger-234-24.30 is installed
  • OR systemd-mini-234-24.30 is installed
  • OR systemd-mini-bash-completion-234-24.30 is installed
  • OR systemd-mini-container-mini-234-24.30 is installed
  • OR systemd-mini-coredump-mini-234-24.30 is installed
  • OR systemd-mini-devel-234-24.30 is installed
  • OR systemd-mini-sysvinit-234-24.30 is installed
  • OR udev-mini-234-24.30 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • AND Package Information
  • util-linux-systemd-2.31.1-9.3 is installed
  • OR uuidd-2.31.1-9.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • AND Package Information
  • libecpg6-10.6-6 is installed
  • OR postgresql10-contrib-10.6-6 is installed
  • OR postgresql10-devel-10.6-6 is installed
  • OR postgresql10-docs-10.6-6 is installed
  • OR postgresql10-plperl-10.6-6 is installed
  • OR postgresql10-plpython-10.6-6 is installed
  • OR postgresql10-pltcl-10.6-6 is installed
  • OR postgresql10-server-10.6-6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 15 is installed
  • AND Package Information
  • apache2-mod_php7-7.2.5-4.3 is installed
  • OR php7-7.2.5-4.3 is installed
  • OR php7-bcmath-7.2.5-4.3 is installed
  • OR php7-bz2-7.2.5-4.3 is installed
  • OR php7-calendar-7.2.5-4.3 is installed
  • OR php7-ctype-7.2.5-4.3 is installed
  • OR php7-curl-7.2.5-4.3 is installed
  • OR php7-dba-7.2.5-4.3 is installed
  • OR php7-devel-7.2.5-4.3 is installed
  • OR php7-dom-7.2.5-4.3 is installed
  • OR php7-enchant-7.2.5-4.3 is installed
  • OR php7-exif-7.2.5-4.3 is installed
  • OR php7-fastcgi-7.2.5-4.3 is installed
  • OR php7-fileinfo-7.2.5-4.3 is installed
  • OR php7-fpm-7.2.5-4.3 is installed
  • OR php7-ftp-7.2.5-4.3 is installed
  • OR php7-gd-7.2.5-4.3 is installed
  • OR php7-gettext-7.2.5-4.3 is installed
  • OR php7-gmp-7.2.5-4.3 is installed
  • OR php7-iconv-7.2.5-4.3 is installed
  • OR php7-intl-7.2.5-4.3 is installed
  • OR php7-json-7.2.5-4.3 is installed
  • OR php7-ldap-7.2.5-4.3 is installed
  • OR php7-mbstring-7.2.5-4.3 is installed
  • OR php7-mysql-7.2.5-4.3 is installed
  • OR php7-odbc-7.2.5-4.3 is installed
  • OR php7-opcache-7.2.5-4.3 is installed
  • OR php7-openssl-7.2.5-4.3 is installed
  • OR php7-pcntl-7.2.5-4.3 is installed
  • OR php7-pdo-7.2.5-4.3 is installed
  • OR php7-pear-7.2.5-4.3 is installed
  • OR php7-pear-Archive_Tar-7.2.5-4.3 is installed
  • OR php7-pgsql-7.2.5-4.3 is installed
  • OR php7-phar-7.2.5-4.3 is installed
  • OR php7-posix-7.2.5-4.3 is installed
  • OR php7-shmop-7.2.5-4.3 is installed
  • OR php7-snmp-7.2.5-4.3 is installed
  • OR php7-soap-7.2.5-4.3 is installed
  • OR php7-sockets-7.2.5-4.3 is installed
  • OR php7-sqlite-7.2.5-4.3 is installed
  • OR php7-sysvmsg-7.2.5-4.3 is installed
  • OR php7-sysvsem-7.2.5-4.3 is installed
  • OR php7-sysvshm-7.2.5-4.3 is installed
  • OR php7-tokenizer-7.2.5-4.3 is installed
  • OR php7-wddx-7.2.5-4.3 is installed
  • OR php7-xmlreader-7.2.5-4.3 is installed
  • OR php7-xmlrpc-7.2.5-4.3 is installed
  • OR php7-xmlwriter-7.2.5-4.3 is installed
  • OR php7-xsl-7.2.5-4.3 is installed
  • OR php7-zip-7.2.5-4.3 is installed
  • OR php7-zlib-7.2.5-4.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 is installed
  • AND yast2-core-3.1.11-1.9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • augeas-1.2.0-3.1 is installed
  • OR augeas-lenses-1.2.0-3.1 is installed
  • OR libaugeas0-1.2.0-3.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND ppp-2.4.7-1.7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 is installed
  • AND Package Information
  • kernel-default-4.12.14-25.3 is installed
  • OR kernel-default-extra-4.12.14-25.3 is installed
    • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 12 is installed
  • AND Package Information
  • chromedriver-53.0.2785.89-96 is installed
  • OR chromium-53.0.2785.89-96 is installed
  • OR chromium-desktop-gnome-53.0.2785.89-96 is installed
  • OR chromium-desktop-kde-53.0.2785.89-96 is installed
  • OR chromium-ffmpegsumo-53.0.2785.89-96 is installed
    • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 15 is installed
  • AND Package Information
  • ffmpeg-4-4.0.2-bp150.3.3 is installed
  • OR ffmpeg-4-libavcodec-devel-4.0.2-bp150.3.3 is installed
  • OR ffmpeg-4-libavdevice-devel-4.0.2-bp150.3.3 is installed
  • OR ffmpeg-4-libavfilter-devel-4.0.2-bp150.3.3 is installed
  • OR ffmpeg-4-libavformat-devel-4.0.2-bp150.3.3 is installed
  • OR ffmpeg-4-libavresample-devel-4.0.2-bp150.3.3 is installed
  • OR ffmpeg-4-libavutil-devel-4.0.2-bp150.3.3 is installed
  • OR ffmpeg-4-libpostproc-devel-4.0.2-bp150.3.3 is installed
  • OR ffmpeg-4-libswresample-devel-4.0.2-bp150.3.3 is installed
  • OR ffmpeg-4-libswscale-devel-4.0.2-bp150.3.3 is installed
  • OR ffmpeg-4-private-devel-4.0.2-bp150.3.3 is installed
  • OR libavcodec58-4.0.2-bp150.3.3 is installed
  • OR libavcodec58-32bit-4.0.2-13 is installed
  • OR libavcodec58-64bit-4.0.2-bp150.3.3 is installed
  • OR libavdevice58-4.0.2-bp150.3.3 is installed
  • OR libavdevice58-32bit-4.0.2-13 is installed
  • OR libavdevice58-64bit-4.0.2-bp150.3.3 is installed
  • OR libavfilter7-4.0.2-bp150.3.3 is installed
  • OR libavfilter7-32bit-4.0.2-13 is installed
  • OR libavfilter7-64bit-4.0.2-bp150.3.3 is installed
  • OR libavformat58-4.0.2-bp150.3.3 is installed
  • OR libavformat58-32bit-4.0.2-13 is installed
  • OR libavformat58-64bit-4.0.2-bp150.3.3 is installed
  • OR libavresample4-4.0.2-bp150.3.3 is installed
  • OR libavresample4-32bit-4.0.2-13 is installed
  • OR libavresample4-64bit-4.0.2-bp150.3.3 is installed
  • OR libavutil56-4.0.2-bp150.3.3 is installed
  • OR libavutil56-32bit-4.0.2-13 is installed
  • OR libavutil56-64bit-4.0.2-bp150.3.3 is installed
  • OR libpostproc55-4.0.2-bp150.3.3 is installed
  • OR libpostproc55-32bit-4.0.2-13 is installed
  • OR libpostproc55-64bit-4.0.2-bp150.3.3 is installed
  • OR libswresample3-4.0.2-bp150.3.3 is installed
  • OR libswresample3-32bit-4.0.2-13 is installed
  • OR libswresample3-64bit-4.0.2-bp150.3.3 is installed
  • OR libswscale5-4.0.2-bp150.3.3 is installed
  • OR libswscale5-32bit-4.0.2-13 is installed
  • OR libswscale5-64bit-4.0.2-bp150.3.3 is installed
    • BACK