Oval Definition:	oval:org.opensuse.security:def:2651
Revision Date: 2020-12-02 Version: 1 Title: Security update for MozillaFirefox (Important) Description: This update for MozillaFirefox to ESR 60.2 fixes several issues. These general changes are part of the version 60 release. - New browser engine with speed improvements - Redesigned graphical user interface elements - Unified address and search bar for new installations - New tab page listing top visited, recently visited and recommended pages - Support for configuration policies in enterprise deployments via JSON files - Support for Web Authentication, allowing the use of USB tokens for authentication to web sites The following changes affect compatibility: - Now exclusively supports extensions built using the WebExtension API. - Unsupported legacy extensions will no longer work in Firefox 60 ESR - TLS certificates issued by Symantec before June 1st, 2016 are no longer trusted The 'security.pki.distrust_ca_policy' preference can be set to 0 to reinstate trust in those certificates The following issues affect performance: - new format for storing private keys, certificates and certificate trust If the user home or data directory is on a network file system, it is recommended that users set the following environment variable to avoid slowdowns: NSS_SDB_USE_CACHE=yes This setting is not recommended for local, fast file systems. These security issues were fixed: - CVE-2018-12381: Dragging and dropping Outlook email message results in page navigation (bsc#1107343). - CVE-2017-16541: Proxy bypass using automount and autofs (bsc#1107343). - CVE-2018-12376: Various memory safety bugs (bsc#1107343). - CVE-2018-12377: Use-after-free in refresh driver timers (bsc#1107343). - CVE-2018-12378: Use-after-free in IndexedDB (bsc#1107343). - CVE-2018-12379: Out-of-bounds write with malicious MAR file (bsc#1107343). Family: unix Class: patch Status: Reference(s): 1015173 1084645 1086613 1089524 1092125 1094767 1096748 1099162 1100352 1101262 1107343 1107424 1108606 1109363 1109465 1110506 1110507 1111177 1114567 1115015 1115022 1115025 1115717 1117025 1120281 1121563 1121626 1122000 1123333 1123727 1123892 1124153 1125113 1125352 1129403 1129715 1134078 1136572 1137526 1153102 1154064 CVE-2016-9918 CVE-2017-16541 CVE-2018-1000845 CVE-2018-10733 CVE-2018-10861 CVE-2018-1128 CVE-2018-1129 CVE-2018-12376 CVE-2018-12377 CVE-2018-12378 CVE-2018-12379 CVE-2018-12381 CVE-2018-12383 CVE-2018-12385 CVE-2018-12386 CVE-2018-12387 CVE-2018-13301 CVE-2018-14662 CVE-2018-16548 CVE-2018-16843 CVE-2018-16844 CVE-2018-16845 CVE-2018-16846 CVE-2018-17000 CVE-2018-19210 CVE-2019-12730 CVE-2019-17113 CVE-2019-17542 CVE-2019-6128 CVE-2019-6454 CVE-2019-6470 CVE-2019-7663 CVE-2019-9718 SUSE-SU-2018:2890-1 SUSE-SU-2018:3476-1 SUSE-SU-2019:0285-1 SUSE-SU-2019:0334-1 SUSE-SU-2019:0426-1 SUSE-SU-2019:0586-1 SUSE-SU-2019:0720-1 SUSE-SU-2019:0786-1 SUSE-SU-2019:0841-1 SUSE-SU-2019:2622-1 SUSE-SU-2019:2657-1 SUSE-SU-2019:2750-1 SUSE-SU-2019:3184-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability 15 SUSE Linux Enterprise High Availability 15 SP1 SUSE Linux Enterprise Module for additional PackageHub packages 15 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for High Performance Computing 15 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Module for Web Scripting 15 SP1 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Package Hub for SUSE Linux Enterprise 12 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-1 is installed OR aaa_base-extras-13.2+git20140911.61c1681-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information bash-4.2-75 is installed OR bash-doc-4.2-75 is installed OR bash-lang-4.2-75 is installed OR libreadline6-6.2-75 is installed OR libreadline6-32bit-6.2-75 is installed OR readline-doc-6.2-75 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information ghostscript-9.15-17 is installed OR ghostscript-x11-9.15-17 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND libopus0-1.1-3 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kernel-default-3.12.60-52.60.1 is installed OR kernel-default-base-3.12.60-52.60.1 is installed OR kernel-default-devel-3.12.60-52.60.1 is installed OR kernel-devel-3.12.60-52.60.1 is installed OR kernel-macros-3.12.60-52.60.1 is installed OR kernel-source-3.12.60-52.60.1 is installed OR kernel-syms-3.12.60-52.60.1 is installed OR kernel-xen-3.12.60-52.60.1 is installed OR kernel-xen-base-3.12.60-52.60.1 is installed OR kernel-xen-devel-3.12.60-52.60.1 is installed OR kgraft-patch-3_12_60-52_60-default-1-2.1 is installed OR kgraft-patch-3_12_60-52_60-xen-1-2.1 is installed OR kgraft-patch-SLE12_Update_17-1-2.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND ctdb-4.4.2-29 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND Package Information cluster-md-kmp-default-4.4.73-5 is installed OR dlm-kmp-default-4.4.73-5 is installed OR gfs2-kmp-default-4.4.73-5 is installed OR ocfs2-kmp-default-4.4.73-5 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND Package Information cluster-md-kmp-default-4.12.14-94.41 is installed OR dlm-kmp-default-4.12.14-94.41 is installed OR gfs2-kmp-default-4.12.14-94.41 is installed OR ocfs2-kmp-default-4.12.14-94.41 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 is installed AND Package Information cluster-md-kmp-default-4.12.14-25.13 is installed OR dlm-kmp-default-4.12.14-25.13 is installed OR gfs2-kmp-default-4.12.14-25.13 is installed OR kernel-default-4.12.14-25.13 is installed OR ocfs2-kmp-default-4.12.14-25.13 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 SP1 is installed AND Package Information ctdb-4.9.5+git.187.71edee57d5a-3.9 is installed OR samba-4.9.5+git.187.71edee57d5a-3.9 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed AND Package Information graphviz-addons-2.40.1-6.3 is installed OR graphviz-gnome-2.40.1-6.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND Package Information puppet-3.6.2-3 is installed OR puppet-server-3.6.2-3 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND Package Information MozillaFirefox-60.2.0-3.10 is installed OR MozillaFirefox-branding-SLE-60-4.3 is installed OR MozillaFirefox-devel-60.2.0-3.10 is installed OR MozillaFirefox-translations-common-60.2.0-3.10 is installed OR MozillaFirefox-translations-other-60.2.0-3.10 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 15 is installed AND Package Information python-numpy_1_16_1-gnu-hpc-1.16.1-4.8 is installed OR python2-numpy-gnu-hpc-1.16.1-4.8 is installed OR python2-numpy-gnu-hpc-devel-1.16.1-4.8 is installed OR python3-numpy-gnu-hpc-1.16.1-4.8 is installed OR python3-numpy-gnu-hpc-devel-1.16.1-4.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information libopenssl-1_0_0-devel-1.0.2n-3.3 is installed OR libopenssl1_0_0-1.0.2n-3.3 is installed OR openssl-1_0_0-1.0.2n-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information libopenssl-1_0_0-devel-1.0.2p-3.22 is installed OR libopenssl1_0_0-1.0.2p-3.22 is installed OR openssl-1_0_0-1.0.2p-3.22 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND kernel-livepatch-tools-1.1-5.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-195-default-3-7 is installed OR kernel-livepatch-SLE15-SP1_Update_0-3-7 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information libopenmpt-0.3.19-2.10 is installed OR openmpt123-0.3.19-2.10 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information bzip2-1.0.6-5.3 is installed OR bzip2-doc-1.0.6-5.3 is installed OR libbz2-devel-32bit-1.0.6-5.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed AND Package Information MozillaFirefox-68.6.1-3.81 is installed OR MozillaFirefox-branding-upstream-68.6.1-3.81 is installed OR MozillaFirefox-buildsymbols-68.6.1-3.81 is installed OR MozillaFirefox-devel-68.6.1-3.81 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information libvirt-5.1.0-8.6 is installed OR libvirt-admin-5.1.0-8.6 is installed OR libvirt-bash-completion-5.1.0-8.6 is installed OR libvirt-client-5.1.0-8.6 is installed OR libvirt-daemon-5.1.0-8.6 is installed OR libvirt-daemon-config-network-5.1.0-8.6 is installed OR libvirt-daemon-config-nwfilter-5.1.0-8.6 is installed OR libvirt-daemon-driver-interface-5.1.0-8.6 is installed OR libvirt-daemon-driver-libxl-5.1.0-8.6 is installed OR libvirt-daemon-driver-lxc-5.1.0-8.6 is installed OR libvirt-daemon-driver-network-5.1.0-8.6 is installed OR libvirt-daemon-driver-nodedev-5.1.0-8.6 is installed OR libvirt-daemon-driver-nwfilter-5.1.0-8.6 is installed OR libvirt-daemon-driver-qemu-5.1.0-8.6 is installed OR libvirt-daemon-driver-secret-5.1.0-8.6 is installed OR libvirt-daemon-driver-storage-5.1.0-8.6 is installed OR libvirt-daemon-driver-storage-core-5.1.0-8.6 is installed OR libvirt-daemon-driver-storage-disk-5.1.0-8.6 is installed OR libvirt-daemon-driver-storage-iscsi-5.1.0-8.6 is installed OR libvirt-daemon-driver-storage-logical-5.1.0-8.6 is installed OR libvirt-daemon-driver-storage-mpath-5.1.0-8.6 is installed OR libvirt-daemon-driver-storage-rbd-5.1.0-8.6 is installed OR libvirt-daemon-driver-storage-scsi-5.1.0-8.6 is installed OR libvirt-daemon-hooks-5.1.0-8.6 is installed OR libvirt-daemon-lxc-5.1.0-8.6 is installed OR libvirt-daemon-qemu-5.1.0-8.6 is installed OR libvirt-daemon-xen-5.1.0-8.6 is installed OR libvirt-devel-5.1.0-8.6 is installed OR libvirt-doc-5.1.0-8.6 is installed OR libvirt-lock-sanlock-5.1.0-8.6 is installed OR libvirt-nss-5.1.0-8.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information nodejs4-4.5.0-5 is installed OR nodejs4-devel-4.5.0-5 is installed OR nodejs4-docs-4.5.0-5 is installed OR npm4-4.5.0-5 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information apache2-mod_php7-7.2.5-4.12 is installed OR php7-7.2.5-4.12 is installed OR php7-bcmath-7.2.5-4.12 is installed OR php7-bz2-7.2.5-4.12 is installed OR php7-calendar-7.2.5-4.12 is installed OR php7-ctype-7.2.5-4.12 is installed OR php7-curl-7.2.5-4.12 is installed OR php7-dba-7.2.5-4.12 is installed OR php7-devel-7.2.5-4.12 is installed OR php7-dom-7.2.5-4.12 is installed OR php7-enchant-7.2.5-4.12 is installed OR php7-exif-7.2.5-4.12 is installed OR php7-fastcgi-7.2.5-4.12 is installed OR php7-fileinfo-7.2.5-4.12 is installed OR php7-fpm-7.2.5-4.12 is installed OR php7-ftp-7.2.5-4.12 is installed OR php7-gd-7.2.5-4.12 is installed OR php7-gettext-7.2.5-4.12 is installed OR php7-gmp-7.2.5-4.12 is installed OR php7-iconv-7.2.5-4.12 is installed OR php7-intl-7.2.5-4.12 is installed OR php7-json-7.2.5-4.12 is installed OR php7-ldap-7.2.5-4.12 is installed OR php7-mbstring-7.2.5-4.12 is installed OR php7-mysql-7.2.5-4.12 is installed OR php7-odbc-7.2.5-4.12 is installed OR php7-opcache-7.2.5-4.12 is installed OR php7-openssl-7.2.5-4.12 is installed OR php7-pcntl-7.2.5-4.12 is installed OR php7-pdo-7.2.5-4.12 is installed OR php7-pear-7.2.5-4.12 is installed OR php7-pear-Archive_Tar-7.2.5-4.12 is installed OR php7-pgsql-7.2.5-4.12 is installed OR php7-phar-7.2.5-4.12 is installed OR php7-posix-7.2.5-4.12 is installed OR php7-shmop-7.2.5-4.12 is installed OR php7-snmp-7.2.5-4.12 is installed OR php7-soap-7.2.5-4.12 is installed OR php7-sockets-7.2.5-4.12 is installed OR php7-sqlite-7.2.5-4.12 is installed OR php7-sysvmsg-7.2.5-4.12 is installed OR php7-sysvsem-7.2.5-4.12 is installed OR php7-sysvshm-7.2.5-4.12 is installed OR php7-tokenizer-7.2.5-4.12 is installed OR php7-wddx-7.2.5-4.12 is installed OR php7-xmlreader-7.2.5-4.12 is installed OR php7-xmlrpc-7.2.5-4.12 is installed OR php7-xmlwriter-7.2.5-4.12 is installed OR php7-xsl-7.2.5-4.12 is installed OR php7-zip-7.2.5-4.12 is installed OR php7-zlib-7.2.5-4.12 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed AND apache-commons-beanutils-1.9.2-4.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-1 is installed OR aaa_base-extras-13.2+git20140911.61c1681-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information MozillaFirefox-38.4.0esr-51 is installed OR MozillaFirefox-translations-38.4.0esr-51 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND libgc1-7.2d-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information alsa-1.0.27.2-15 is installed OR alsa-docs-1.0.27.2-15 is installed OR libasound2-1.0.27.2-15 is installed OR libasound2-32bit-1.0.27.2-15 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND zoo-2.10-1020 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information FastCGI-2.4.0-167.1 is installed OR perl-FastCGI-2.4.0-167.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information DirectFB-devel-1.7.1-6.1 is installed OR lib++dfb-devel-1.7.1-6.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND libgio-fam-2.48.2-10.2 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information kernel-default-4.12.14-25.13 is installed OR kernel-default-extra-4.12.14-25.13 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.10 is installed OR kernel-default-extra-4.12.14-197.10 is installed Definition Synopsis SUSE Package Hub for SUSE Linux Enterprise 12 is installed AND Package Information chromedriver-54.0.2840.59-109 is installed OR chromium-54.0.2840.59-109 is installed OR chromium-ffmpegsumo-54.0.2840.59-109 is installed
BACK