Oval Definition:	oval:org.opensuse.security:def:20153750
Revision Date: 2018-05-02 Version: 1 Title: CVE-2015-3750 Description: WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not enforce the HTTP Strict Transport Security (HSTS) protection mechanism for Content Security Policy (CSP) report requests, which allows man-in-the-middle attackers to obtain sensitive information by sniffing the network or spoof a report by modifying the client-server data stream. Family: unix Class: vulnerability Status: Reference(s): CVE-2015-3750 Platform(s): openSUSE Leap 42.1 Product(s): Definition Synopsis openSUSE Leap 42.1 is installed AND Package Information libjavascriptcoregtk-4_0-18-2.10.7-7.1 is installed AND libjavascriptcoregtk-4_0-18 is signed with openSUSE key OR libjavascriptcoregtk-4_0-18-32bit-2.10.7-7.1 is installed AND libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key OR libwebkit2gtk-4_0-37-2.10.7-7.1 is installed AND libwebkit2gtk-4_0-37 is signed with openSUSE key OR libwebkit2gtk-4_0-37-32bit-2.10.7-7.1 is installed AND libwebkit2gtk-4_0-37-32bit is signed with openSUSE key OR libwebkit2gtk3-lang-2.10.7-7.1 is installed AND libwebkit2gtk3-lang is signed with openSUSE key OR typelib-1_0-JavaScriptCore-4_0-2.10.7-7.1 is installed AND typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key OR typelib-1_0-WebKit2-4_0-2.10.7-7.1 is installed AND typelib-1_0-WebKit2-4_0 is signed with openSUSE key OR typelib-1_0-WebKit2WebExtension-4_0-2.10.7-7.1 is installed AND typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key OR webkit-jsc-4-2.10.7-7.1 is installed AND webkit-jsc-4 is signed with openSUSE key OR webkit2gtk-4_0-injected-bundles-2.10.7-7.1 is installed AND webkit2gtk-4_0-injected-bundles is signed with openSUSE key OR webkit2gtk3-2.10.7-7.1 is installed AND webkit2gtk3 is signed with openSUSE key OR webkit2gtk3-devel-2.10.7-7.1 is installed AND webkit2gtk3-devel is signed with openSUSE key
BACK