Oval Definition:	oval:org.opensuse.security:def:510
Revision Date: 2022-06-02 Version: 1 Title: Security update for MozillaFirefox (Important) Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.10.0 ESR (MFSA 2022-21)(bsc#1200027) - CVE-2022-31736: Cross-Origin resource's length leaked - CVE-2022-31737: Heap buffer overflow in WebGL - CVE-2022-31738: Browser window spoof using fullscreen mode - CVE-2022-31739: Attacker-influenced path traversal when saving downloaded files - CVE-2022-31740: Register allocation problem in WASM on arm64 - CVE-2022-31741: Uninitialized variable leads to invalid memory read - CVE-2022-31742: Querying a WebAuthn token with a large number of allowCredential entries may have leaked cross-origin information - CVE-2022-31747: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10 Family: unix Class: patch Status: Reference(s): 1200027 CVE-2018-14779 CVE-2018-14779 CVE-2018-14780 CVE-2018-14780 CVE-2022-31736 CVE-2022-31737 CVE-2022-31738 CVE-2022-31739 CVE-2022-31740 CVE-2022-31741 CVE-2022-31742 CVE-2022-31747 SUSE-SU-2022:1920-1 Platform(s): openSUSE 13.1 openSUSE Leap 15.4 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 15 SP1 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Toolchain 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Storage 6 SUSE Manager Proxy 4.0 SUSE Manager Server 4.0 Product(s): Definition Synopsis openSUSE Leap 15.4 is installed AND Package Information MozillaFirefox-91.10.0-150200.152.43.1 is installed OR MozillaFirefox-branding-upstream-91.10.0-150200.152.43.1 is installed OR MozillaFirefox-devel-91.10.0-150200.152.43.1 is installed OR MozillaFirefox-translations-common-91.10.0-150200.152.43.1 is installed OR MozillaFirefox-translations-other-91.10.0-150200.152.43.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information MozillaFirefox-45.4.0esr-81 is installed OR MozillaFirefox-translations-45.4.0esr-81 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information libykcs11-1-1.6.2-4.30 is installed OR libykcs11-devel-1.6.2-4.30 is installed OR libykpiv-devel-1.6.2-4.30 is installed OR libykpiv1-1.6.2-4.30 is installed OR yubico-piv-tool-1.6.2-4.30 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information libykcs11-1-1.6.2-4 is installed OR libykcs11-devel-1.6.2-4 is installed OR libykpiv-devel-1.6.2-4 is installed OR libykpiv1-1.6.2-4 is installed OR yubico-piv-tool-1.6.2-4 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND Package Information bluez-5.48-5.8 is installed OR bluez-devel-5.48-5.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND stunnel-5.44-1 is installed
BACK