Oval Definition:oval:org.opensuse.security:def:2851
Revision Date:2020-12-02Version:1
Title:Security update for MozillaFirefox (Moderate)
Description:

This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 78.2.0 ESR * Fixed: Various stability, functionality, and security fixes - Mozilla Firefox ESR 78.2 MFSA 2020-38 (bsc#1175686) * CVE-2020-15663 (bmo#1643199) Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege * CVE-2020-15664 (bmo#1658214) Attacker-induced prompt for extension installation * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626, bmo#1656957) Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2

- Fixed Firefox tab crash in FIPS mode (bsc#1174284).

- Fix broken translation-loading (bsc#1173991) * allow addon sideloading * mark signatures for langpacks non-mandatory * do not autodisable user profile scopes - Google API key is not usable for geolocation service any more
Family:unixClass:patch
Status:Reference(s):1094814
1109412
1109413
1109414
1111966
1111996
1112534
1112535
1113247
1113252
1113255
1115034
1116827
1117993
1118644
1118830
1118831
1120640
1121034
1121035
1121056
1123710
1126088
1127223
1127308
1131055
1131330
1132666
1133131
1133232
1135350
1136035
1136085
1138459
1141267
1141853
1141913
1142772
1144059
1144902
1145692
1146569
1146571
1146572
1146702
1148539
1148742
1152143
1152590
1153674
1154016
1154025
1154289
1154598
1173991
1174284
1175686
1177211
CVE-2009-5155
CVE-2017-18594
CVE-2018-1000876
CVE-2018-15173
CVE-2018-17358
CVE-2018-17359
CVE-2018-17360
CVE-2018-17985
CVE-2018-18309
CVE-2018-18483
CVE-2018-18484
CVE-2018-18605
CVE-2018-18606
CVE-2018-18607
CVE-2018-19931
CVE-2018-19932
CVE-2018-20623
CVE-2018-20651
CVE-2018-20671
CVE-2018-20852
CVE-2018-6323
CVE-2018-6543
CVE-2018-6759
CVE-2018-6872
CVE-2018-7208
CVE-2018-7568
CVE-2018-7569
CVE-2018-7570
CVE-2018-7642
CVE-2018-7643
CVE-2018-8945
CVE-2019-0199
CVE-2019-0221
CVE-2019-1010180
CVE-2019-10160
CVE-2019-10197
CVE-2019-10218
CVE-2019-14287
CVE-2019-14833
CVE-2019-14847
CVE-2019-15142
CVE-2019-15143
CVE-2019-15144
CVE-2019-15145
CVE-2019-2614
CVE-2019-2627
CVE-2019-2628
CVE-2019-9169
CVE-2020-15663
CVE-2020-15664
CVE-2020-15670
CVE-2020-26116
SUSE-SU-2019:1877-1
SUSE-SU-2019:1895-1
SUSE-SU-2019:2020-1
SUSE-SU-2019:2050-1
SUSE-SU-2019:2425-1
SUSE-SU-2019:2452-1
SUSE-SU-2019:2656-1
SUSE-SU-2019:2779-1
SUSE-SU-2019:2866-1
SUSE-SU-2019:2913-1
SUSE-SU-2020:2563-1
SUSE-SU-2020:3115-1
Platform(s):SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise High Availability 12 SP4
SUSE Linux Enterprise High Availability 15
SUSE Linux Enterprise High Availability Extension 11 SP3
SUSE Linux Enterprise Module for additional PackageHub packages 15
SUSE Linux Enterprise Module for Advanced Systems Management 12
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
SUSE Linux Enterprise Module for High Performance Computing 15
SUSE Linux Enterprise Module for Legacy Software 12
SUSE Linux Enterprise Module for Legacy Software 15
SUSE Linux Enterprise Module for Legacy Software 15 SP1
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
SUSE Linux Enterprise Module for Public Cloud 15
SUSE Linux Enterprise Module for Public Cloud 15 SP1
SUSE Linux Enterprise Module for Python2 packages 15 SP1
SUSE Linux Enterprise Module for Realtime packages 15 SP1
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Module for Toolchain 12
SUSE Linux Enterprise Module for Web Scripting 12
SUSE Linux Enterprise Module for Web Scripting 15
SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Server 11 SP1-LTSS
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP2-LTSS
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP3-LTSS
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 11-SECURITY
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server for VMWare 11 SP2
SUSE Linux Enterprise Server for VMWare 11 SP3
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Software Development Kit 12 SP2
Product(s):
Definition Synopsis
  • SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed
  • AND python-requests-2.3.0-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • aaa_base-13.2+git20140911.61c1681-1 is installed
  • OR aaa_base-extras-13.2+git20140911.61c1681-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND argyllcms-1.6.3-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • dbus-1-1.8.22-24.8 is installed
  • OR dbus-1-x11-1.8.22-24.8 is installed
  • OR libdbus-1-3-1.8.22-24.8 is installed
  • OR libdbus-1-3-32bit-1.8.22-24.8 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • NetworkManager-1.0.12-12 is installed
  • OR NetworkManager-lang-1.0.12-12 is installed
  • OR libnm-glib-vpn1-1.0.12-12 is installed
  • OR libnm-glib4-1.0.12-12 is installed
  • OR libnm-util2-1.0.12-12 is installed
  • OR libnm0-1.0.12-12 is installed
  • OR typelib-1_0-NM-1_0-1.0.12-12 is installed
  • OR typelib-1_0-NMClient-1_0-1.0.12-12 is installed
  • OR typelib-1_0-NetworkManager-1_0-1.0.12-12 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP4 is installed
  • AND libpcreposix0-8.39-8.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise High Availability 15 is installed
  • AND Package Information
  • drbd-9.0.13+git.b83ade31-3.2 is installed
  • OR drbd-kmp-default-9.0.13+git.b83ade31_k4.12.14_23-3.2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed
  • AND Package Information
  • glib2-2.54.3-4.7 is installed
  • OR glib2-devel-32bit-2.54.3-4.7 is installed
  • OR glib2-tools-32bit-2.54.3-4.7 is installed
  • OR libgthread-2_0-0-32bit-2.54.3-4.7 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed
  • AND Package Information
  • puppet-3.6.2-3 is installed
  • OR puppet-server-3.6.2-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed
  • AND Package Information
  • MozillaFirefox-78.2.0-3.105 is installed
  • OR MozillaFirefox-devel-78.2.0-3.105 is installed
  • OR MozillaFirefox-translations-common-78.2.0-3.105 is installed
  • OR MozillaFirefox-translations-other-78.2.0-3.105 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for High Performance Computing 15 is installed
  • AND Package Information
  • libpmi0-17.11.13-6.18 is installed
  • OR libslurm32-17.11.13-6.18 is installed
  • OR perl-slurm-17.11.13-6.18 is installed
  • OR slurm-17.11.13-6.18 is installed
  • OR slurm-auth-none-17.11.13-6.18 is installed
  • OR slurm-config-17.11.13-6.18 is installed
  • OR slurm-devel-17.11.13-6.18 is installed
  • OR slurm-doc-17.11.13-6.18 is installed
  • OR slurm-lua-17.11.13-6.18 is installed
  • OR slurm-munge-17.11.13-6.18 is installed
  • OR slurm-node-17.11.13-6.18 is installed
  • OR slurm-pam_slurm-17.11.13-6.18 is installed
  • OR slurm-plugins-17.11.13-6.18 is installed
  • OR slurm-slurmdbd-17.11.13-6.18 is installed
  • OR slurm-sql-17.11.13-6.18 is installed
  • OR slurm-torque-17.11.13-6.18 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 12 is installed
  • AND Package Information
  • java-1_6_0-ibm-1.6.0_sr16.1-5 is installed
  • OR java-1_6_0-ibm-fonts-1.6.0_sr16.1-5 is installed
  • OR java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5 is installed
  • OR java-1_6_0-ibm-plugin-1.6.0_sr16.1-5 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 15 is installed
  • AND Package Information
  • libopenssl-1_0_0-devel-1.0.2p-3.14 is installed
  • OR libopenssl1_0_0-1.0.2p-3.14 is installed
  • OR openssl-1_0_0-1.0.2p-3.14 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed
  • AND Package Information
  • kernel-default-4.12.14-197.18 is installed
  • OR reiserfs-kmp-default-4.12.14-197.18 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 is installed
  • AND Package Information
  • kernel-default-4.12.14-25.13 is installed
  • OR kernel-default-livepatch-4.12.14-25.13 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
  • AND Package Information
  • kernel-default-4.12.14-197.4 is installed
  • OR kernel-default-livepatch-4.12.14-197.4 is installed
  • OR kernel-default-livepatch-devel-4.12.14-197.4 is installed
  • OR kernel-livepatch-4_12_14-197_4-default-1-3.3 is installed
  • OR kernel-livepatch-SLE15-SP1_Update_1-1-3.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
  • AND Package Information
  • glibc-2.26-13.24 is installed
  • OR glibc-devel-static-32bit-2.26-13.24 is installed
  • OR glibc-html-2.26-13.24 is installed
  • OR glibc-locale-base-32bit-2.26-13.24 is installed
  • OR glibc-profile-32bit-2.26-13.24 is installed
  • OR glibc-utils-32bit-2.26-13.24 is installed
  • OR glibc-utils-src-2.26-13.24 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 15 is installed
  • AND Package Information
  • kernel-azure-4.12.14-5.5 is installed
  • OR kernel-azure-base-4.12.14-5.5 is installed
  • OR kernel-azure-devel-4.12.14-5.5 is installed
  • OR kernel-devel-azure-4.12.14-5.5 is installed
  • OR kernel-source-azure-4.12.14-5.5 is installed
  • OR kernel-syms-azure-4.12.14-5.5 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed
  • AND Package Information
  • kernel-azure-4.12.14-8.13 is installed
  • OR kernel-azure-base-4.12.14-8.13 is installed
  • OR kernel-azure-devel-4.12.14-8.13 is installed
  • OR kernel-devel-azure-4.12.14-8.13 is installed
  • OR kernel-source-azure-4.12.14-8.13 is installed
  • OR kernel-syms-azure-4.12.14-8.13 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed
  • AND Package Information
  • python-2.7.14-7.14 is installed
  • OR python-base-2.7.14-7.14 is installed
  • OR python-curses-2.7.14-7.14 is installed
  • OR python-devel-2.7.14-7.14 is installed
  • OR python-gdbm-2.7.14-7.14 is installed
  • OR python-xml-2.7.14-7.14 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Realtime packages 15 SP1 is installed
  • AND Package Information
  • cluster-md-kmp-rt-4.12.14-14.14 is installed
  • OR dlm-kmp-rt-4.12.14-14.14 is installed
  • OR gfs2-kmp-rt-4.12.14-14.14 is installed
  • OR kernel-devel-rt-4.12.14-14.14 is installed
  • OR kernel-rt-4.12.14-14.14 is installed
  • OR kernel-rt-base-4.12.14-14.14 is installed
  • OR kernel-rt-devel-4.12.14-14.14 is installed
  • OR kernel-rt_debug-4.12.14-14.14 is installed
  • OR kernel-rt_debug-devel-4.12.14-14.14 is installed
  • OR kernel-source-rt-4.12.14-14.14 is installed
  • OR kernel-syms-rt-4.12.14-14.14 is installed
  • OR ocfs2-kmp-rt-4.12.14-14.14 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • AND Package Information
  • qemu-2.11.2-9.9 is installed
  • OR qemu-arm-2.11.2-9.9 is installed
  • OR qemu-block-curl-2.11.2-9.9 is installed
  • OR qemu-block-iscsi-2.11.2-9.9 is installed
  • OR qemu-block-rbd-2.11.2-9.9 is installed
  • OR qemu-block-ssh-2.11.2-9.9 is installed
  • OR qemu-guest-agent-2.11.2-9.9 is installed
  • OR qemu-ipxe-1.0.0-9.9 is installed
  • OR qemu-kvm-2.11.2-9.9 is installed
  • OR qemu-lang-2.11.2-9.9 is installed
  • OR qemu-ppc-2.11.2-9.9 is installed
  • OR qemu-s390-2.11.2-9.9 is installed
  • OR qemu-seabios-1.11.0-9.9 is installed
  • OR qemu-sgabios-8-9.9 is installed
  • OR qemu-vgabios-1.11.0-9.9 is installed
  • OR qemu-x86-2.11.2-9.9 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • AND Package Information
  • subversion-1.10.6-3.6 is installed
  • OR subversion-server-1.10.6-3.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Toolchain 12 is installed
  • AND Package Information
  • cpp5-5.3.1+r233831-9 is installed
  • OR gcc5-5.3.1+r233831-9 is installed
  • OR gcc5-c++-5.3.1+r233831-9 is installed
  • OR gcc5-fortran-5.3.1+r233831-9 is installed
  • OR gcc5-info-5.3.1+r233831-9 is installed
  • OR gcc5-locale-5.3.1+r233831-9 is installed
  • OR libffi-devel-gcc5-5.3.1+r233831-9 is installed
  • OR libstdc++6-devel-gcc5-5.3.1+r233831-9 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 12 is installed
  • AND Package Information
  • apache2-mod_php5-5.5.14-4 is installed
  • OR php5-5.5.14-4 is installed
  • OR php5-bcmath-5.5.14-4 is installed
  • OR php5-bz2-5.5.14-4 is installed
  • OR php5-calendar-5.5.14-4 is installed
  • OR php5-ctype-5.5.14-4 is installed
  • OR php5-curl-5.5.14-4 is installed
  • OR php5-dba-5.5.14-4 is installed
  • OR php5-dom-5.5.14-4 is installed
  • OR php5-enchant-5.5.14-4 is installed
  • OR php5-exif-5.5.14-4 is installed
  • OR php5-fastcgi-5.5.14-4 is installed
  • OR php5-fileinfo-5.5.14-4 is installed
  • OR php5-fpm-5.5.14-4 is installed
  • OR php5-ftp-5.5.14-4 is installed
  • OR php5-gd-5.5.14-4 is installed
  • OR php5-gettext-5.5.14-4 is installed
  • OR php5-gmp-5.5.14-4 is installed
  • OR php5-iconv-5.5.14-4 is installed
  • OR php5-intl-5.5.14-4 is installed
  • OR php5-json-5.5.14-4 is installed
  • OR php5-ldap-5.5.14-4 is installed
  • OR php5-mbstring-5.5.14-4 is installed
  • OR php5-mcrypt-5.5.14-4 is installed
  • OR php5-mysql-5.5.14-4 is installed
  • OR php5-odbc-5.5.14-4 is installed
  • OR php5-openssl-5.5.14-4 is installed
  • OR php5-pcntl-5.5.14-4 is installed
  • OR php5-pdo-5.5.14-4 is installed
  • OR php5-pear-5.5.14-4 is installed
  • OR php5-pgsql-5.5.14-4 is installed
  • OR php5-pspell-5.5.14-4 is installed
  • OR php5-shmop-5.5.14-4 is installed
  • OR php5-snmp-5.5.14-4 is installed
  • OR php5-soap-5.5.14-4 is installed
  • OR php5-sockets-5.5.14-4 is installed
  • OR php5-sqlite-5.5.14-4 is installed
  • OR php5-suhosin-5.5.14-4 is installed
  • OR php5-sysvmsg-5.5.14-4 is installed
  • OR php5-sysvsem-5.5.14-4 is installed
  • OR php5-sysvshm-5.5.14-4 is installed
  • OR php5-tokenizer-5.5.14-4 is installed
  • OR php5-wddx-5.5.14-4 is installed
  • OR php5-xmlreader-5.5.14-4 is installed
  • OR php5-xmlrpc-5.5.14-4 is installed
  • OR php5-xmlwriter-5.5.14-4 is installed
  • OR php5-xsl-5.5.14-4 is installed
  • OR php5-zip-5.5.14-4 is installed
  • OR php5-zlib-5.5.14-4 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 15 is installed
  • AND Package Information
  • apache2-mod_php7-7.2.5-4.12 is installed
  • OR php7-7.2.5-4.12 is installed
  • OR php7-bcmath-7.2.5-4.12 is installed
  • OR php7-bz2-7.2.5-4.12 is installed
  • OR php7-calendar-7.2.5-4.12 is installed
  • OR php7-ctype-7.2.5-4.12 is installed
  • OR php7-curl-7.2.5-4.12 is installed
  • OR php7-dba-7.2.5-4.12 is installed
  • OR php7-devel-7.2.5-4.12 is installed
  • OR php7-dom-7.2.5-4.12 is installed
  • OR php7-enchant-7.2.5-4.12 is installed
  • OR php7-exif-7.2.5-4.12 is installed
  • OR php7-fastcgi-7.2.5-4.12 is installed
  • OR php7-fileinfo-7.2.5-4.12 is installed
  • OR php7-fpm-7.2.5-4.12 is installed
  • OR php7-ftp-7.2.5-4.12 is installed
  • OR php7-gd-7.2.5-4.12 is installed
  • OR php7-gettext-7.2.5-4.12 is installed
  • OR php7-gmp-7.2.5-4.12 is installed
  • OR php7-iconv-7.2.5-4.12 is installed
  • OR php7-intl-7.2.5-4.12 is installed
  • OR php7-json-7.2.5-4.12 is installed
  • OR php7-ldap-7.2.5-4.12 is installed
  • OR php7-mbstring-7.2.5-4.12 is installed
  • OR php7-mysql-7.2.5-4.12 is installed
  • OR php7-odbc-7.2.5-4.12 is installed
  • OR php7-opcache-7.2.5-4.12 is installed
  • OR php7-openssl-7.2.5-4.12 is installed
  • OR php7-pcntl-7.2.5-4.12 is installed
  • OR php7-pdo-7.2.5-4.12 is installed
  • OR php7-pear-7.2.5-4.12 is installed
  • OR php7-pear-Archive_Tar-7.2.5-4.12 is installed
  • OR php7-pgsql-7.2.5-4.12 is installed
  • OR php7-phar-7.2.5-4.12 is installed
  • OR php7-posix-7.2.5-4.12 is installed
  • OR php7-shmop-7.2.5-4.12 is installed
  • OR php7-snmp-7.2.5-4.12 is installed
  • OR php7-soap-7.2.5-4.12 is installed
  • OR php7-sockets-7.2.5-4.12 is installed
  • OR php7-sqlite-7.2.5-4.12 is installed
  • OR php7-sysvmsg-7.2.5-4.12 is installed
  • OR php7-sysvsem-7.2.5-4.12 is installed
  • OR php7-sysvshm-7.2.5-4.12 is installed
  • OR php7-tokenizer-7.2.5-4.12 is installed
  • OR php7-wddx-7.2.5-4.12 is installed
  • OR php7-xmlreader-7.2.5-4.12 is installed
  • OR php7-xmlrpc-7.2.5-4.12 is installed
  • OR php7-xmlwriter-7.2.5-4.12 is installed
  • OR php7-xsl-7.2.5-4.12 is installed
  • OR php7-zip-7.2.5-4.12 is installed
  • OR php7-zlib-7.2.5-4.12 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 is installed
  • AND apache2-mod_nss-1.0.8-9 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • alsa-1.0.27.2-11 is installed
  • OR alsa-docs-1.0.27.2-11 is installed
  • OR libasound2-1.0.27.2-11 is installed
  • OR libasound2-32bit-1.0.27.2-11 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND cifs-utils-6.5-8 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 is installed
  • AND Package Information
  • libnettle-2.7.1-9.1 is installed
  • OR libnettle-devel-2.7.1-9.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP1 is installed
  • AND Package Information
  • finch-devel-2.10.9-8 is installed
  • OR libpurple-2.10.9-8 is installed
  • OR libpurple-devel-2.10.9-8 is installed
  • OR libpurple-lang-2.10.9-8 is installed
  • OR pidgin-devel-2.10.9-8 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP2 is installed
  • AND rpm-devel-4.11.2-15.1 is installed
  • BACK