Oval Definition:	oval:org.opensuse.security:def:52166
Revision Date: 2020-12-01 Version: 1 Title: Security update for MozillaFirefox (Important) Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.1.0 ESR * Fixed: Various stability, functionality, and security fixes (bsc#1174538) * CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker * CVE-2020-6514: WebRTC data channel leaks internal address to peer * CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy * CVE-2020-15653: Bypassing iframe sandbox when allowing popups * CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture * CVE-2020-15656: Type confusion for special arguments in IonMonkey * CVE-2020-15658: Overriding file type when saving to disk * CVE-2020-15657: DLL hijacking due to incorrect loading path * CVE-2020-15654: Custom cursor can overlay user interface * CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1 Family: unix Class: patch Status: Reference(s): 1055186 1065600 1065729 1071995 1085030 1094244 1112178 1113956 1120163 1123156 1133021 1149032 1149126 1149429 1151186 1152472 1152489 1152778 1153274 1153879 1154353 1154366 1154488 1154492 1154738 1155518 1156395 1159058 1160634 1161066 1163018 1163985 1165776 1166240 1167527 1167773 1168468 1169790 1169972 1170940 1171634 1171675 1171688 1171742 1172108 1172197 1172247 1172418 1172871 1172963 1173115 1173160 1173468 1173485 1173798 1173813 1173954 1174002 1174003 1174026 1174205 1174247 1174362 1174387 1174484 1174538 1174625 1174645 1174689 1174699 1174737 1174757 1174762 1174770 1174771 1174777 1174805 1174824 1174825 1174852 1174865 1174880 1174897 1174899 1174906 1174969 1175009 1175010 1175011 1175012 1175013 1175014 1175015 1175016 1175017 1175018 1175019 1175020 1175021 1175052 1175112 1175116 1175128 1175149 1175175 1175176 1175180 1175181 1175182 1175183 1175184 1175185 1175186 1175187 1175188 1175189 1175190 1175191 1175192 1175195 1175199 1175213 1175228 1175232 1175263 1175284 1175296 1175344 1175345 1175346 1175347 1175367 1175377 1175440 1175493 1175546 1175550 1175654 1175691 1175749 1175768 1175769 1175770 1175771 1175772 1175774 1175775 1175834 1175873 1175882 1176011 1176022 1176038 1176086 1176181 1176235 1176242 1176278 1176316 1176317 1176318 1176319 1176320 1176321 1176381 1176395 1176410 1176423 1176482 1176507 1176536 1176544 1176545 1176546 1176548 1176659 1176671 1176698 1176699 1176700 1176721 1176722 1176725 1176732 1176788 1176789 1176869 1176877 1176935 1176950 1176962 1176966 1176990 1177027 1177030 1177041 1177042 1177043 1177044 1177121 1177206 1177258 1177291 1177293 1177294 1177295 1177296 CVE-2011-4182 CVE-2012-0862 CVE-2012-1571 CVE-2012-1571 CVE-2012-2150 CVE-2013-4342 CVE-2014-2653 CVE-2014-3158 CVE-2014-3710 CVE-2014-3710 CVE-2014-8116 CVE-2014-8116 CVE-2014-8117 CVE-2014-8117 CVE-2015-5352 CVE-2015-5600 CVE-2015-6563 CVE-2015-6564 CVE-2015-8325 CVE-2016-0777 CVE-2016-0778 CVE-2016-1856 CVE-2016-1857 CVE-2016-1908 CVE-2016-3115 CVE-2016-4590 CVE-2016-4591 CVE-2016-4622 CVE-2016-4624 CVE-2016-6210 CVE-2016-6515 CVE-2019-11757 CVE-2019-11758 CVE-2019-11759 CVE-2019-11760 CVE-2019-11761 CVE-2019-11762 CVE-2019-11763 CVE-2019-11764 CVE-2019-15903 CVE-2019-20382 CVE-2019-6778 CVE-2020-0404 CVE-2020-0427 CVE-2020-0431 CVE-2020-0432 CVE-2020-10745 CVE-2020-14314 CVE-2020-14331 CVE-2020-14356 CVE-2020-14381 CVE-2020-14390 CVE-2020-15652 CVE-2020-15653 CVE-2020-15654 CVE-2020-15655 CVE-2020-15656 CVE-2020-15657 CVE-2020-15658 CVE-2020-15659 CVE-2020-16166 CVE-2020-1711 CVE-2020-1720 CVE-2020-1983 CVE-2020-24659 CVE-2020-25212 CVE-2020-25284 CVE-2020-25641 CVE-2020-25643 CVE-2020-26088 CVE-2020-6463 CVE-2020-6514 CVE-2020-7039 CVE-2020-8608 SUSE-SU-2019:2912-1 SUSE-SU-2020:0589-1 SUSE-SU-2020:1523-1 SUSE-SU-2020:2065-1 SUSE-SU-2020:2486-1 SUSE-SU-2020:2988-1 Platform(s): openSUSE Leap 15.0 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information MozillaThunderbird-52.7-lp150.2 is installed OR MozillaThunderbird-translations-common-52.7-lp150.2 is installed OR MozillaThunderbird-translations-other-52.7-lp150.2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information perl-5.10.0-64.70 is installed OR perl-32bit-5.10.0-64.70 is installed OR perl-Module-Build-0.2808.01-0.70 is installed OR perl-Test-Simple-0.72-0.70 is installed OR perl-base-5.10.0-64.70 is installed OR perl-doc-5.10.0-64.70 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND wireshark-1.10.13-8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information file-5.19-9 is installed OR file-magic-5.19-9 is installed OR libmagic1-5.19-9 is installed OR libmagic1-32bit-5.19-9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information file-5.19-9 is installed OR file-magic-5.19-9 is installed OR libmagic1-5.19-9 is installed OR libmagic1-32bit-5.19-9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libjavascriptcoregtk-4_0-18-2.12.5-1 is installed OR libwebkit2gtk-4_0-37-2.12.5-1 is installed OR libwebkit2gtk3-lang-2.12.5-1 is installed OR typelib-1_0-JavaScriptCore-4_0-2.12.5-1 is installed OR typelib-1_0-WebKit2-4_0-2.12.5-1 is installed OR webkit2gtk-4_0-injected-bundles-2.12.5-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-38.8 is installed OR aaa_base-extras-13.2+git20140911.61c1681-38.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information MozillaFirefox-78.1.0-3.100 is installed OR MozillaFirefox-branding-upstream-78.1.0-3.100 is installed OR MozillaFirefox-buildsymbols-78.1.0-3.100 is installed OR MozillaFirefox-devel-78.1.0-3.100 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information expat-2.1.0-13 is installed OR libexpat1-2.1.0-13 is installed OR libexpat1-32bit-2.1.0-13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information xen-4.5.5_14-22.25 is installed OR xen-doc-html-4.5.5_14-22.25 is installed OR xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25 is installed OR xen-libs-4.5.5_14-22.25 is installed OR xen-libs-32bit-4.5.5_14-22.25 is installed OR xen-tools-4.5.5_14-22.25 is installed OR xen-tools-domU-4.5.5_14-22.25 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND gd-2.1.0-12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND wpa_supplicant-2.6-15.10 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information ImageMagick-6.8.8.1-71.108 is installed OR ImageMagick-config-6-SUSE-6.8.8.1-71.108 is installed OR ImageMagick-config-6-upstream-6.8.8.1-71.108 is installed OR libMagickCore-6_Q16-1-6.8.8.1-71.108 is installed OR libMagickWand-6_Q16-1-6.8.8.1-71.108 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_74-92_38-default-9-2 is installed OR kgraft-patch-SLE12-SP2_Update_13-9-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND dnsmasq-2.76-17 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information java-1_7_1-ibm-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information kgraft-patch-4_4_156-94_64-default-7-2 is installed OR kgraft-patch-SLE12-SP3_Update_20-7-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information kgraft-patch-4_4_156-94_64-default-6-2 is installed OR kgraft-patch-SLE12-SP3_Update_20-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libtiff5-4.0.9-44.24 is installed OR libtiff5-32bit-4.0.9-44.24 is installed OR tiff-4.0.9-44.24 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information colord-gtk-lang-0.1.26-6 is installed OR libcolord-gtk1-0.1.26-6 is installed OR libcolord2-1.3.3-12 is installed OR libcolord2-32bit-1.3.3-12 is installed OR libcolorhug2-1.3.3-12 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information libdcerpc-binding0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libdcerpc-binding0-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR libdcerpc-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libdcerpc-samr-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libdcerpc-samr0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libdcerpc0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libdcerpc0-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR libndr-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libndr-krb5pac-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libndr-krb5pac0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libndr-krb5pac0-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR libndr-nbt-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libndr-nbt0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libndr-nbt0-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR libndr-standard-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libndr-standard0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libndr-standard0-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR libndr0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libndr0-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR libnetapi-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libnetapi0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libnetapi0-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamba-credentials-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamba-credentials0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamba-credentials0-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamba-errors-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamba-errors0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamba-errors0-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamba-hostconfig-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamba-hostconfig0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamba-hostconfig0-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamba-passdb-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamba-passdb0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamba-passdb0-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamba-policy-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamba-policy0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamba-util-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamba-util0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamba-util0-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamdb-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamdb0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsamdb0-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsmbclient-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsmbclient0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsmbclient0-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsmbconf-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsmbconf0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsmbconf0-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsmbldap-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsmbldap2-4.7.11+git.240.76c9942a99f-4.43 is installed OR libsmbldap2-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR libtevent-util-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libtevent-util0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libtevent-util0-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR libwbclient-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR libwbclient0-4.7.11+git.240.76c9942a99f-4.43 is installed OR libwbclient0-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR samba-4.7.11+git.240.76c9942a99f-4.43 is installed OR samba-client-4.7.11+git.240.76c9942a99f-4.43 is installed OR samba-client-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR samba-core-devel-4.7.11+git.240.76c9942a99f-4.43 is installed OR samba-libs-4.7.11+git.240.76c9942a99f-4.43 is installed OR samba-libs-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed OR samba-winbind-4.7.11+git.240.76c9942a99f-4.43 is installed OR samba-winbind-32bit-4.7.11+git.240.76c9942a99f-4.43 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information qemu-2.11.2-9.36 is installed OR qemu-block-curl-2.11.2-9.36 is installed OR qemu-block-iscsi-2.11.2-9.36 is installed OR qemu-block-rbd-2.11.2-9.36 is installed OR qemu-block-ssh-2.11.2-9.36 is installed OR qemu-guest-agent-2.11.2-9.36 is installed OR qemu-ipxe-1.0.0+-9.36 is installed OR qemu-kvm-2.11.2-9.36 is installed OR qemu-lang-2.11.2-9.36 is installed OR qemu-ppc-2.11.2-9.36 is installed OR qemu-seabios-1.11.0-9.36 is installed OR qemu-sgabios-8-9.36 is installed OR qemu-tools-2.11.2-9.36 is installed OR qemu-vgabios-1.11.0-9.36 is installed OR qemu-x86-2.11.2-9.36 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information MozillaThunderbird-68.2.1-3.58 is installed OR MozillaThunderbird-translations-common-68.2.1-3.58 is installed OR MozillaThunderbird-translations-other-68.2.1-3.58 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information kernel-default-5.3.18-24.12 is installed OR kernel-default-extra-5.3.18-24.12 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information dnsmasq-2.78-18.3 is installed OR dnsmasq-utils-2.78-18.3 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information glibc-2.22-62.13 is installed OR glibc-32bit-2.22-62.13 is installed OR glibc-devel-2.22-62.13 is installed OR glibc-devel-32bit-2.22-62.13 is installed OR glibc-html-2.22-62.13 is installed OR glibc-i18ndata-2.22-62.13 is installed OR glibc-info-2.22-62.13 is installed OR glibc-locale-2.22-62.13 is installed OR glibc-locale-32bit-2.22-62.13 is installed OR glibc-profile-2.22-62.13 is installed OR glibc-profile-32bit-2.22-62.13 is installed OR nscd-2.22-62.13 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND ansible-2.4.6.0-3.6 is installed Definition Synopsis SUSE OpenStack Cloud 9 is installed AND python-Twisted-15.2.1-9.5 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information ruby2.1-rubygem-activejob-4_2-4.2.9-3.6 is installed OR rubygem-activejob-4_2-4.2.9-3.6 is installed
BACK