Oval Definition:	oval:org.opensuse.security:def:45958
Revision Date: 2020-12-01 Version: 1 Title: Security update for MozillaFirefox (Important) Description: This update for MozillaFirefox, mozilla-nss fixes the following issues: MozillaFirefox to version ESR 60.8: - CVE-2019-9811: Sandbox escape via installation of malicious language pack (bsc#1140868). - CVE-2019-11711: Script injection within domain through inner window reuse (bsc#1140868). - CVE-2019-11712: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects (bsc#1140868). - CVE-2019-11713: Use-after-free with HTTP/2 cached stream (bsc#1140868). - CVE-2019-11729: Empty or malformed p256-ECDH public keys may trigger a segmentation fault (bsc#1140868). - CVE-2019-11715: HTML parsing error can contribute to content XSS (bsc#1140868). - CVE-2019-11717: Caret character improperly escaped in origins (bsc#1140868). - CVE-2019-11719: Out-of-bounds read when importing curve25519 private key (bsc#1140868). - CVE-2019-11730: Same-origin policy treats all files in a directory as having the same-origin (bsc#1140868). - CVE-2019-11709: Multiple Memory safety bugs fixed (bsc#1140868). mozilla-nss to version 3.44.1: Added IPSEC IKE support to softoken * Many new FIPS test cases Family: unix Class: patch Status: Reference(s): 1010675 1027519 1051510 1065729 1071995 1085030 1110146 1111666 1113956 1114279 1118598 1126613 1127820 1127821 1127822 1129537 1140868 1142214 1144333 1148868 1152497 1153332 1154448 1154456 1154458 1154460 1154461 1154464 1155199 1155945 1157888 1158003 1158004 1158005 1158006 1158007 1158983 1160903 1160904 1160905 1160906 1161016 1162063 1162610 1162687 1162689 1162691 1166985 1168081 1169194 1170592 1171904 1172205 1172405 1172458 1172472 1172537 1172538 1172759 1172775 1172781 1172782 1172783 1172884 1174157 CVE-2016-9318 CVE-2018-12178 CVE-2018-12180 CVE-2018-12207 CVE-2018-16301 CVE-2018-19871 CVE-2018-3630 CVE-2019-11135 CVE-2019-11709 CVE-2019-11711 CVE-2019-11712 CVE-2019-11713 CVE-2019-11715 CVE-2019-11717 CVE-2019-11719 CVE-2019-11729 CVE-2019-11730 CVE-2019-12528 CVE-2019-14866 CVE-2019-15165 CVE-2019-18420 CVE-2019-18421 CVE-2019-18422 CVE-2019-18423 CVE-2019-18424 CVE-2019-18425 CVE-2019-18902 CVE-2019-18903 CVE-2019-19577 CVE-2019-19578 CVE-2019-19579 CVE-2019-19580 CVE-2019-19581 CVE-2019-19582 CVE-2019-19583 CVE-2019-20810 CVE-2019-9628 CVE-2019-9811 CVE-2020-0543 CVE-2020-10766 CVE-2020-10767 CVE-2020-10768 CVE-2020-13974 CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621 CVE-2020-7216 CVE-2020-7217 CVE-2020-8022 CVE-2020-8449 CVE-2020-8450 CVE-2020-8517 CVE-2020-8597 SUSE-SU-2019:0581-1 SUSE-SU-2019:1861-1 SUSE-SU-2019:1896-1 SUSE-SU-2019:3297-1 SUSE-SU-2020:0351-1 SUSE-SU-2020:0487-1 SUSE-SU-2020:0490-1 SUSE-SU-2020:1632-1 SUSE-SU-2020:1693-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 42.3 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3-BCL SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND chromium-66.0.3359.170-lp150.1 is installed Definition Synopsis openSUSE Leap 42.3 is installed AND Package Information gpg2-2.0.24-8 is installed OR gpg2-lang-2.0.24-8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-31.4.0esr-0.8 is installed OR MozillaFirefox-translations-31.4.0esr-0.8 is installed OR libfreebl3-3.17.3-0.8 is installed OR libfreebl3-32bit-3.17.3-0.8 is installed OR libsoftokn3-3.17.3-0.8 is installed OR libsoftokn3-32bit-3.17.3-0.8 is installed OR mozilla-nss-3.17.3-0.8 is installed OR mozilla-nss-32bit-3.17.3-0.8 is installed OR mozilla-nss-tools-3.17.3-0.8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information flash-player-11.2.202.559-0.32 is installed OR flash-player-gnome-11.2.202.559-0.32 is installed OR flash-player-kde4-11.2.202.559-0.32 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information accountsservice-0.6.35-1 is installed OR accountsservice-lang-0.6.35-1 is installed OR libaccountsservice0-0.6.35-1 is installed OR typelib-1_0-AccountsService-1_0-0.6.35-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-9 is installed OR aaa_base-extras-13.2+git20140911.61c1681-9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND bogofilter-1.2.4-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information bzip2-1.0.6-29 is installed OR libbz2-1-1.0.6-29 is installed OR libbz2-1-32bit-1.0.6-29 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information apparmor-docs-2.8.2-49 is installed OR apparmor-parser-2.8.2-49 is installed OR apparmor-profiles-2.8.2-49 is installed OR apparmor-utils-2.8.2-49 is installed OR libapparmor1-2.8.2-49 is installed OR libapparmor1-32bit-2.8.2-49 is installed OR pam_apparmor-2.8.2-49 is installed OR pam_apparmor-32bit-2.8.2-49 is installed OR perl-apparmor-2.8.2-49 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed AND Package Information ffmpeg-3.4.2-4.17 is installed OR libavdevice57-3.4.2-4.17 is installed OR libavfilter6-3.4.2-4.17 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 is installed AND Package Information gtk2-devel-2.24.32-2 is installed OR gtk2-lang-2.24.32-2 is installed OR gtk2-tools-2.24.32-2 is installed OR libgtk-2_0-0-2.24.32-2 is installed OR typelib-1_0-Gtk-2_0-2.24.32-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information gstreamer-1.12.5-1 is installed OR gstreamer-lang-1.12.5-1 is installed OR libgstreamer-1_0-0-1.12.5-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND Package Information gdk-pixbuf-query-loaders-32bit-2.36.11-3 is installed OR libgdk_pixbuf-2_0-0-32bit-2.36.11-3 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND Package Information NetworkManager-1.10.6-5.3 is installed OR NetworkManager-devel-1.10.6-5.3 is installed OR libnm-glib-vpn1-1.10.6-5.3 is installed OR libnm-glib4-1.10.6-5.3 is installed OR libnm-util2-1.10.6-5.3 is installed OR typelib-1_0-NMClient-1_0-1.10.6-5.3 is installed OR typelib-1_0-NetworkManager-1_0-1.10.6-5.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 is installed AND zlib-devel-32bit-1.2.11-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information java-1_8_0-openjdk-1.8.0.181-3.10 is installed OR java-1_8_0-openjdk-demo-1.8.0.181-3.10 is installed OR java-1_8_0-openjdk-devel-1.8.0.181-3.10 is installed OR java-1_8_0-openjdk-headless-1.8.0.181-3.10 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_4-default-8-2 is installed OR kernel-livepatch-SLE15-SP1_Update_1-8-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information go1.11-1.11.13-1.18 is installed OR go1.11-doc-1.11.13-1.18 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information cargo-doc-1.36.0-4 is installed OR rust-1.36.0-4 is installed OR rust-doc-1.36.0-4 is installed OR rust-gdb-1.36.0-4 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 is installed AND Package Information kernel-azure-4.12.14-5.27 is installed OR kernel-azure-base-4.12.14-5.27 is installed OR kernel-azure-devel-4.12.14-5.27 is installed OR kernel-devel-azure-4.12.14-5.27 is installed OR kernel-source-azure-4.12.14-5.27 is installed OR kernel-syms-azure-4.12.14-5.27 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND mercurial-4.5.2-3.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information 389-ds-1.4.0.26~git0.8a2d3de6f-4.14 is installed OR 389-ds-devel-1.4.0.26~git0.8a2d3de6f-4.14 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information libsaml-devel-2.6.1-1 is installed OR libsaml9-2.6.1-1 is installed OR opensaml-schemas-2.6.1-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND p7zip-9.20.1-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information libseccomp-2.4.1-11.3 is installed OR libseccomp2-2.4.1-11.3 is installed OR libseccomp2-32bit-2.4.1-11.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information java-1_8_0-ibm-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information perl-5.18.2-12.20 is installed OR perl-32bit-5.18.2-12.20 is installed OR perl-base-5.18.2-12.20 is installed OR perl-doc-5.18.2-12.20 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information libXRes1-1.0.7-3 is installed OR libXRes1-32bit-1.0.7-3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-BCL is installed AND MozillaFirefox-60.8.0-109.83 is installed OR MozillaFirefox-translations-common-60.8.0-109.83 is installed OR libfreebl3-3.44.1-58.28 is installed OR libfreebl3-32bit-3.44.1-58.28 is installed OR libfreebl3-hmac-3.44.1-58.28 is installed OR libfreebl3-hmac-32bit-3.44.1-58.28 is installed OR libsoftokn3-3.44.1-58.28 is installed OR libsoftokn3-32bit-3.44.1-58.28 is installed OR libsoftokn3-hmac-3.44.1-58.28 is installed OR libsoftokn3-hmac-32bit-3.44.1-58.28 is installed OR mozilla-nss-3.44.1-58.28 is installed OR mozilla-nss-32bit-3.44.1-58.28 is installed OR mozilla-nss-certs-3.44.1-58.28 is installed OR mozilla-nss-certs-32bit-3.44.1-58.28 is installed OR mozilla-nss-sysinit-3.44.1-58.28 is installed OR mozilla-nss-sysinit-32bit-3.44.1-58.28 is installed OR mozilla-nss-tools-3.44.1-58.28 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-BCL is installed AND MozillaFirefox-60.8.0-109.83 is installed OR MozillaFirefox-translations-common-60.8.0-109.83 is installed OR libfreebl3-3.44.1-58.28 is installed OR libfreebl3-32bit-3.44.1-58.28 is installed OR libfreebl3-hmac-3.44.1-58.28 is installed OR libfreebl3-hmac-32bit-3.44.1-58.28 is installed OR libsoftokn3-3.44.1-58.28 is installed OR libsoftokn3-32bit-3.44.1-58.28 is installed OR libsoftokn3-hmac-3.44.1-58.28 is installed OR libsoftokn3-hmac-32bit-3.44.1-58.28 is installed OR mozilla-nss-3.44.1-58.28 is installed OR mozilla-nss-32bit-3.44.1-58.28 is installed OR mozilla-nss-certs-3.44.1-58.28 is installed OR mozilla-nss-certs-32bit-3.44.1-58.28 is installed OR mozilla-nss-sysinit-3.44.1-58.28 is installed OR mozilla-nss-sysinit-32bit-3.44.1-58.28 is installed OR mozilla-nss-tools-3.44.1-58.28 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information libpython3_4m1_0-3.4.6-25.29 is installed OR python3-3.4.6-25.29 is installed OR python3-base-3.4.6-25.29 is installed OR python3-curses-3.4.6-25.29 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND libxml2-2.9.4-46.20 is installed OR libxml2-2-2.9.4-46.20 is installed OR libxml2-2-32bit-2.9.4-46.20 is installed OR libxml2-doc-2.9.4-46.20 is installed OR libxml2-tools-2.9.4-46.20 is installed OR python-libxml2-2.9.4-46.20 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA is installed AND libxml2-2.9.4-46.20 is installed OR libxml2-2-2.9.4-46.20 is installed OR libxml2-2-32bit-2.9.4-46.20 is installed OR libxml2-doc-2.9.4-46.20 is installed OR libxml2-tools-2.9.4-46.20 is installed OR python-libxml2-2.9.4-46.20 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libQtWebKit4-4.8.7+2.3.4-4.7 is installed OR libQtWebKit4-32bit-4.8.7+2.3.4-4.7 is installed OR libqca2-2.0.3-17.7 is installed OR libqca2-32bit-2.0.3-17.7 is installed OR libqt4-4.8.7-8.8 is installed OR libqt4-32bit-4.8.7-8.8 is installed OR libqt4-devel-doc-4.8.7-8.8 is installed OR libqt4-qt3support-4.8.7-8.8 is installed OR libqt4-qt3support-32bit-4.8.7-8.8 is installed OR libqt4-sql-4.8.7-8.8 is installed OR libqt4-sql-32bit-4.8.7-8.8 is installed OR libqt4-sql-mysql-4.8.7-8.8 is installed OR libqt4-sql-plugins-4.8.7-8.8 is installed OR libqt4-sql-sqlite-4.8.7-8.8 is installed OR libqt4-x11-4.8.7-8.8 is installed OR libqt4-x11-32bit-4.8.7-8.8 is installed OR qt4-x11-tools-4.8.7-8.8 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4 is installed AND libxml2-2.9.4-46.20 is installed OR libxml2-2-2.9.4-46.20 is installed OR libxml2-2-32bit-2.9.4-46.20 is installed OR libxml2-doc-2.9.4-46.20 is installed OR libxml2-tools-2.9.4-46.20 is installed OR python-libxml2-2.9.4-46.20 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND libxml2-2.9.4-46.20 is installed OR libxml2-2-2.9.4-46.20 is installed OR libxml2-2-32bit-2.9.4-46.20 is installed OR libxml2-doc-2.9.4-46.20 is installed OR libxml2-tools-2.9.4-46.20 is installed OR python-libxml2-2.9.4-46.20 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND ant-1.9.4-3.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4-ESPOS is installed AND java-1_7_0-openjdk-1.7.0.271-43.41 is installed OR java-1_7_0-openjdk-demo-1.7.0.271-43.41 is installed OR java-1_7_0-openjdk-devel-1.7.0.271-43.41 is installed OR java-1_7_0-openjdk-headless-1.7.0.271-43.41 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4-ESPOS is installed AND java-1_7_0-openjdk-1.7.0.271-43.41 is installed OR java-1_7_0-openjdk-demo-1.7.0.271-43.41 is installed OR java-1_7_0-openjdk-devel-1.7.0.271-43.41 is installed OR java-1_7_0-openjdk-headless-1.7.0.271-43.41 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed AND kernel-default-4.12.14-122.26 is installed OR kernel-default-base-4.12.14-122.26 is installed OR kernel-default-devel-4.12.14-122.26 is installed OR kernel-default-man-4.12.14-122.26 is installed OR kernel-devel-4.12.14-122.26 is installed OR kernel-macros-4.12.14-122.26 is installed OR kernel-source-4.12.14-122.26 is installed OR kernel-syms-4.12.14-122.26 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND kernel-default-4.12.14-122.26 is installed OR kernel-default-base-4.12.14-122.26 is installed OR kernel-default-devel-4.12.14-122.26 is installed OR kernel-default-man-4.12.14-122.26 is installed OR kernel-devel-4.12.14-122.26 is installed OR kernel-macros-4.12.14-122.26 is installed OR kernel-source-4.12.14-122.26 is installed OR kernel-syms-4.12.14-122.26 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information nodejs10-10.19.0-1.18 is installed OR nodejs10-devel-10.19.0-1.18 is installed OR nodejs10-docs-10.19.0-1.18 is installed OR npm10-10.19.0-1.18 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information kernel-default-3.12.51-60.25 is installed OR kernel-default-extra-3.12.51-60.25 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information gstreamer-0_10-plugins-good-0.10.31-16 is installed OR gstreamer-0_10-plugins-good-lang-0.10.31-16 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information kernel-default-4.4.143-94.47 is installed OR kernel-default-extra-4.4.143-94.47 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information kernel-default-4.12.14-95.48 is installed OR kernel-default-extra-4.12.14-95.48 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP5 is installed AND Package Information evolution-3.22.6-19.9 is installed OR evolution-lang-3.22.6-19.9 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information colord-1.4.2-1 is installed OR colord-gtk-lang-0.1.26-1 is installed OR colord-lang-1.4.2-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND NetworkManager-lang-1.10.6-5.3 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND python-urllib3-1.22-5.6 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND nodejs6-6.14.3-11.15 is installed
BACK