Oval Definition:oval:org.opensuse.security:def:51255
Revision Date:2020-12-01Version:1
Title:Security update for MozillaFirefox (Important)
Description:

This update for MozillaFirefox fixes the following issues:

Mozilla Firefox was updated to 68.3esr (MFSA 2019-37 bsc#1158328) Security issues fixed:

- CVE-2019-17008: Fixed a use-after-free in worker destruction (bmo#1546331) - CVE-2019-13722: Fixed a stack corruption due to incorrect number of arguments in WebRTC code (bmo#1580156) - CVE-2019-11745: Fixed an out of bounds write in NSS when encrypting with a block cipher (bmo#1586176) - CVE-2019-17009: Fixed an issue where updater temporary files accessible to unprivileged processes (bmo#1510494) - CVE-2019-17010: Fixed a use-after-free when performing device orientation checks (bmo#1581084) - CVE-2019-17005: Fixed a buffer overflow in plain text serializer (bmo#1584170) - CVE-2019-17011: Fixed a use-after-free when retrieving a document in antitracking (bmo#1591334) - CVE-2019-17012: Fixed multiple memmory issues (bmo#1449736, bmo#1533957, bmo#1560667,bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
Family:unixClass:patch
Status:Reference(s):1051510
1071995
1094555
1103203
1104139
1107832
1110233
1111666
1112374
1114279
1115015
1115022
1115025
1128432
1133512
1134730
1134738
1135153
1135296
1135642
1136156
1136157
1136271
1136333
1137103
1137194
1137366
1137884
1137985
1138263
1138336
1138374
1138375
1138589
1138681
1138719
1138732
1140747
1157652
1158328
1159922
1159923
1159924
1159927
1160467
1160468
1166751
1171252
1171254
1174628
1176086
1176181
1176671
CVE-2007-6746
CVE-2008-4936
CVE-2011-1000
CVE-2011-3848
CVE-2011-3872
CVE-2012-3864
CVE-2012-3865
CVE-2012-3866
CVE-2012-3867
CVE-2013-1431
CVE-2013-3567
CVE-2013-4761
CVE-2013-4956
CVE-2014-3248
CVE-2014-3253
CVE-2018-14633
CVE-2018-15173
CVE-2018-16843
CVE-2018-16844
CVE-2018-16845
CVE-2018-16871
CVE-2018-17182
CVE-2019-11045
CVE-2019-11046
CVE-2019-11047
CVE-2019-11050
CVE-2019-11478
CVE-2019-11745
CVE-2019-12614
CVE-2019-12817
CVE-2019-13722
CVE-2019-14896
CVE-2019-14897
CVE-2019-17005
CVE-2019-17008
CVE-2019-17009
CVE-2019-17010
CVE-2019-17011
CVE-2019-17012
CVE-2020-0556
CVE-2020-12653
CVE-2020-12654
CVE-2020-14344
CVE-2020-24659
SUSE-SU-2019:0334-1
SUSE-SU-2019:1290-1
SUSE-SU-2019:1744-1
SUSE-SU-2019:1888-1
SUSE-SU-2019:3337-1
SUSE-SU-2020:0101-1
SUSE-SU-2020:0918-1
SUSE-SU-2020:2116-1
SUSE-SU-2020:2988-1
Platform(s):SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for additional PackageHub packages 15
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
SUSE Linux Enterprise Module for Legacy Software 15 SP1
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Web Scripting 15
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for SAP Applications 15
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • AND Package Information
  • ghostscript-fonts-other-8.62-32.34 is installed
  • OR ghostscript-fonts-rus-8.62-32.34 is installed
  • OR ghostscript-fonts-std-8.62-32.34 is installed
  • OR ghostscript-library-8.62-32.34 is installed
  • OR ghostscript-omni-8.62-32.34 is installed
  • OR ghostscript-x11-8.62-32.34 is installed
  • OR libgimpprint-4.2.7-32.34 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • MozillaFirefox-17.0.7esr-0.8 is installed
  • OR MozillaFirefox-branding-SLED-7-0.12 is installed
  • OR MozillaFirefox-translations-17.0.7esr-0.8 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • g3utils-1.1.36-54 is installed
  • OR mgetty-1.1.36-54 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • liblzo2-2-2.08-1 is installed
  • OR liblzo2-2-32bit-2.08-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • cracklib-2.9.0-7 is installed
  • OR libcrack2-2.9.0-7 is installed
  • OR libcrack2-32bit-2.9.0-7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND krb5-appl-clients-1.0.3-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • MozillaFirefox-52.9.0esr-109.38 is installed
  • OR MozillaFirefox-translations-52.9.0esr-109.38 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed
  • AND Package Information
  • nmap-7.70-3.5 is installed
  • OR nping-7.70-3.5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed
  • AND Package Information
  • MozillaFirefox-68.3.0-3.62 is installed
  • OR MozillaFirefox-devel-68.3.0-3.62 is installed
  • OR MozillaFirefox-translations-common-68.3.0-3.62 is installed
  • OR MozillaFirefox-translations-other-68.3.0-3.62 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed
  • AND Package Information
  • kernel-default-4.12.14-197.7 is installed
  • OR reiserfs-kmp-default-4.12.14-197.7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-25_16-default-3-2 is installed
  • OR kernel-livepatch-SLE15_Update_4-3-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-197_10-default-7-2 is installed
  • OR kernel-livepatch-SLE15-SP1_Update_3-7-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • AND nginx-1.14.2-3.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 15 is installed
  • AND Package Information
  • apache2-mod_php7-7.2.5-4.49 is installed
  • OR php7-7.2.5-4.49 is installed
  • OR php7-bcmath-7.2.5-4.49 is installed
  • OR php7-bz2-7.2.5-4.49 is installed
  • OR php7-calendar-7.2.5-4.49 is installed
  • OR php7-ctype-7.2.5-4.49 is installed
  • OR php7-curl-7.2.5-4.49 is installed
  • OR php7-dba-7.2.5-4.49 is installed
  • OR php7-devel-7.2.5-4.49 is installed
  • OR php7-dom-7.2.5-4.49 is installed
  • OR php7-enchant-7.2.5-4.49 is installed
  • OR php7-exif-7.2.5-4.49 is installed
  • OR php7-fastcgi-7.2.5-4.49 is installed
  • OR php7-fileinfo-7.2.5-4.49 is installed
  • OR php7-fpm-7.2.5-4.49 is installed
  • OR php7-ftp-7.2.5-4.49 is installed
  • OR php7-gd-7.2.5-4.49 is installed
  • OR php7-gettext-7.2.5-4.49 is installed
  • OR php7-gmp-7.2.5-4.49 is installed
  • OR php7-iconv-7.2.5-4.49 is installed
  • OR php7-intl-7.2.5-4.49 is installed
  • OR php7-json-7.2.5-4.49 is installed
  • OR php7-ldap-7.2.5-4.49 is installed
  • OR php7-mbstring-7.2.5-4.49 is installed
  • OR php7-mysql-7.2.5-4.49 is installed
  • OR php7-odbc-7.2.5-4.49 is installed
  • OR php7-opcache-7.2.5-4.49 is installed
  • OR php7-openssl-7.2.5-4.49 is installed
  • OR php7-pcntl-7.2.5-4.49 is installed
  • OR php7-pdo-7.2.5-4.49 is installed
  • OR php7-pear-7.2.5-4.49 is installed
  • OR php7-pear-Archive_Tar-7.2.5-4.49 is installed
  • OR php7-pgsql-7.2.5-4.49 is installed
  • OR php7-phar-7.2.5-4.49 is installed
  • OR php7-posix-7.2.5-4.49 is installed
  • OR php7-shmop-7.2.5-4.49 is installed
  • OR php7-snmp-7.2.5-4.49 is installed
  • OR php7-soap-7.2.5-4.49 is installed
  • OR php7-sockets-7.2.5-4.49 is installed
  • OR php7-sodium-7.2.5-4.49 is installed
  • OR php7-sqlite-7.2.5-4.49 is installed
  • OR php7-sysvmsg-7.2.5-4.49 is installed
  • OR php7-sysvsem-7.2.5-4.49 is installed
  • OR php7-sysvshm-7.2.5-4.49 is installed
  • OR php7-tokenizer-7.2.5-4.49 is installed
  • OR php7-wddx-7.2.5-4.49 is installed
  • OR php7-xmlreader-7.2.5-4.49 is installed
  • OR php7-xmlrpc-7.2.5-4.49 is installed
  • OR php7-xmlwriter-7.2.5-4.49 is installed
  • OR php7-xsl-7.2.5-4.49 is installed
  • OR php7-zip-7.2.5-4.49 is installed
  • OR php7-zlib-7.2.5-4.49 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND gzip-1.6-7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • kgraft-patch-3_12_67-60_64_21-default-9-2 is installed
  • OR kgraft-patch-3_12_67-60_64_21-xen-9-2 is installed
  • OR kgraft-patch-SLE12-SP1_Update_10-9-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • fuse-2.9.3-5 is installed
  • OR libfuse2-2.9.3-5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND ucode-intel-20180807-13.29 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • xen-4.7.6_06-43.51 is installed
  • OR xen-doc-html-4.7.6_06-43.51 is installed
  • OR xen-libs-4.7.6_06-43.51 is installed
  • OR xen-libs-32bit-4.7.6_06-43.51 is installed
  • OR xen-tools-4.7.6_06-43.51 is installed
  • OR xen-tools-domU-4.7.6_06-43.51 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_74-92_29-default-11-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_10-11-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND apache2-mod_perl-2.0.8-11 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • nfs-client-1.3.0-34.22 is installed
  • OR nfs-doc-1.3.0-34.22 is installed
  • OR nfs-kernel-server-1.3.0-34.22 is installed
  • OR nfs-utils-1.3.0-34.22 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND Package Information
  • java-1_8_0-ibm-1.8.0_sr5.40-30.54 is installed
  • OR java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54 is installed
  • OR java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • libsolv-0.6.36-2.27.19 is installed
  • OR libsolv-tools-0.6.36-2.27.19 is installed
  • OR libzypp-16.20.2-27.60 is installed
  • OR perl-solv-0.6.36-2.27.19 is installed
  • OR python-solv-0.6.36-2.27.19 is installed
  • OR zypper-1.13.54-18.40 is installed
  • OR zypper-log-1.13.54-18.40 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • libdcerpc-binding0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libdcerpc-binding0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libdcerpc0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libdcerpc0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libndr-krb5pac0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libndr-krb5pac0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libndr-nbt0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libndr-nbt0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libndr-standard0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libndr-standard0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libndr0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libndr0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libnetapi0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libnetapi0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-credentials0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-credentials0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-errors0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-errors0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-hostconfig0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-hostconfig0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-passdb0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-passdb0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-util0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-util0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamdb0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamdb0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsmbclient0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsmbclient0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsmbconf0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsmbconf0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsmbldap0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsmbldap0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libtevent-util0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libtevent-util0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libwbclient0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libwbclient0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR samba-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR samba-client-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR samba-client-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR samba-doc-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR samba-libs-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR samba-libs-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR samba-winbind-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR samba-winbind-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND ft2demos-2.6.3-7.15 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 15-LTSS is installed
  • AND Package Information
  • libX11-1.6.5-3.6 is installed
  • OR libX11-6-1.6.5-3.6 is installed
  • OR libX11-6-32bit-1.6.5-3.6 is installed
  • OR libX11-data-1.6.5-3.6 is installed
  • OR libX11-devel-1.6.5-3.6 is installed
  • OR libX11-xcb1-1.6.5-3.6 is installed
  • OR libX11-xcb1-32bit-1.6.5-3.6 is installed
  • OR libxcb-1.13-3.5 is installed
  • OR libxcb-composite0-1.13-3.5 is installed
  • OR libxcb-damage0-1.13-3.5 is installed
  • OR libxcb-devel-1.13-3.5 is installed
  • OR libxcb-devel-doc-1.13-3.5 is installed
  • OR libxcb-dpms0-1.13-3.5 is installed
  • OR libxcb-dri2-0-1.13-3.5 is installed
  • OR libxcb-dri2-0-32bit-1.13-3.5 is installed
  • OR libxcb-dri3-0-1.13-3.5 is installed
  • OR libxcb-dri3-0-32bit-1.13-3.5 is installed
  • OR libxcb-glx0-1.13-3.5 is installed
  • OR libxcb-glx0-32bit-1.13-3.5 is installed
  • OR libxcb-present0-1.13-3.5 is installed
  • OR libxcb-present0-32bit-1.13-3.5 is installed
  • OR libxcb-randr0-1.13-3.5 is installed
  • OR libxcb-record0-1.13-3.5 is installed
  • OR libxcb-render0-1.13-3.5 is installed
  • OR libxcb-res0-1.13-3.5 is installed
  • OR libxcb-screensaver0-1.13-3.5 is installed
  • OR libxcb-shape0-1.13-3.5 is installed
  • OR libxcb-shm0-1.13-3.5 is installed
  • OR libxcb-sync1-1.13-3.5 is installed
  • OR libxcb-sync1-32bit-1.13-3.5 is installed
  • OR libxcb-xf86dri0-1.13-3.5 is installed
  • OR libxcb-xfixes0-1.13-3.5 is installed
  • OR libxcb-xfixes0-32bit-1.13-3.5 is installed
  • OR libxcb-xinerama0-1.13-3.5 is installed
  • OR libxcb-xinput0-1.13-3.5 is installed
  • OR libxcb-xkb1-1.13-3.5 is installed
  • OR libxcb-xtest0-1.13-3.5 is installed
  • OR libxcb-xv0-1.13-3.5 is installed
  • OR libxcb-xvmc0-1.13-3.5 is installed
  • OR libxcb1-1.13-3.5 is installed
  • OR libxcb1-32bit-1.13-3.5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND Package Information
  • gnutls-3.6.7-6.34 is installed
  • OR libgnutls-devel-3.6.7-6.34 is installed
  • OR libgnutls30-3.6.7-6.34 is installed
  • OR libgnutls30-32bit-3.6.7-6.34 is installed
  • OR libgnutls30-hmac-3.6.7-6.34 is installed
  • OR libgnutls30-hmac-32bit-3.6.7-6.34 is installed
  • OR libgnutlsxx-devel-3.6.7-6.34 is installed
  • OR libgnutlsxx28-3.6.7-6.34 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • bzip2-1.0.6-30.5 is installed
  • OR bzip2-doc-1.0.6-30.5 is installed
  • OR libbz2-1-1.0.6-30.5 is installed
  • OR libbz2-1-32bit-1.0.6-30.5 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • MozillaFirefox-60.7.2-109.80 is installed
  • OR MozillaFirefox-translations-common-60.7.2-109.80 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND Package Information
  • curl-7.37.0-37.43 is installed
  • OR libcurl4-7.37.0-37.43 is installed
  • OR libcurl4-32bit-7.37.0-37.43 is installed
    • BACK