Oval Definition:	oval:org.opensuse.security:def:5352
Revision Date: 2022-02-24 Version: 1 Title: Security update for MozillaFirefox (Important) Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682) - CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service - CVE-2022-22754: Extensions could have bypassed permission confirmation during update - CVE-2022-22756: Drag and dropping an image could have resulted in the dropped object being an executable - CVE-2022-22759: Sandboxed iframes could have executed script if the parent appended elements - CVE-2022-22760: Cross-Origin responses could be distinguished between script and non-script content-types - CVE-2022-22761: frame-ancestors Content Security Policy directive was not enforced for framed extension pages - CVE-2022-22763: Script Execution during invalid object state - CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6 Firefox Extended Support Release 91.5.1 ESR (bsc#1195230) - Fixed an issue that allowed unexpected data to be submitted in some of our search telemetry Family: unix Class: patch Status: Reference(s): 1120999 1172798 1172846 1173972 1174633 1174635 1174638 1174753 1174817 1175168 1195230 1195682 CVE-2008-2109 CVE-2008-5984 CVE-2009-2694 CVE-2009-2703 CVE-2009-3026 CVE-2009-3083 CVE-2009-3084 CVE-2009-3085 CVE-2009-3615 CVE-2010-0013 CVE-2010-0277 CVE-2010-0420 CVE-2010-0423 CVE-2010-1624 CVE-2010-2528 CVE-2010-3711 CVE-2010-4540 CVE-2010-4541 CVE-2010-4542 CVE-2010-4543 CVE-2011-0460 CVE-2011-1091 CVE-2011-2485 CVE-2011-2896 CVE-2011-3172 CVE-2011-3594 CVE-2012-2214 CVE-2012-2669 CVE-2012-3236 CVE-2012-3374 CVE-2012-5532 CVE-2012-5576 CVE-2012-6152 CVE-2013-0271 CVE-2013-0272 CVE-2013-0273 CVE-2013-0274 CVE-2013-1987 CVE-2013-6477 CVE-2013-6478 CVE-2013-6479 CVE-2013-6481 CVE-2013-6482 CVE-2013-6483 CVE-2013-6484 CVE-2013-6485 CVE-2013-6486 CVE-2013-6487 CVE-2014-0020 CVE-2014-1932 CVE-2014-2524 CVE-2014-3564 CVE-2014-3675 CVE-2014-3676 CVE-2014-3677 CVE-2014-3695 CVE-2014-3696 CVE-2014-3698 CVE-2014-6271 CVE-2014-6277 CVE-2014-6278 CVE-2014-7169 CVE-2014-7186 CVE-2014-7187 CVE-2015-4491 CVE-2015-7552 CVE-2015-7673 CVE-2015-7674 CVE-2016-6352 CVE-2020-13844 CVE-2020-14345 CVE-2020-14346 CVE-2020-14347 CVE-2022-22753 CVE-2022-22754 CVE-2022-22756 CVE-2022-22759 CVE-2022-22760 CVE-2022-22761 CVE-2022-22763 CVE-2022-22764 SUSE-SU-2020:2326-1 SUSE-SU-2020:2947-1 SUSE-SU-2022:0565-1 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 11 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Point of Sale 12 SP2 SUSE Linux Enterprise Real Time Extension 12 SP1 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE OpenStack Cloud 5 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND kernel-bigsmp-devel-3.0.101-0.40.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information dia-0.97.2-13 is installed OR dia-lang-0.97.2-13 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information bash-4.3-78 is installed OR bash-doc-4.3-78 is installed OR bash-lang-4.3-78 is installed OR libreadline6-6.3-78 is installed OR libreadline6-32bit-6.3-78 is installed OR readline-doc-6.3-78 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-32bit-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information avahi-0.6.32-30 is installed OR avahi-lang-0.6.32-30 is installed OR libavahi-client3-0.6.32-30 is installed OR libavahi-client3-32bit-0.6.32-30 is installed OR libavahi-common3-0.6.32-30 is installed OR libavahi-common3-32bit-0.6.32-30 is installed OR libavahi-core7-0.6.32-30 is installed OR libdns_sd-0.6.32-30 is installed OR libdns_sd-32bit-0.6.32-30 is installed Definition Synopsis SUSE Linux Enterprise for SAP 11 SP4 is installed AND Package Information compat-openssl097g-0.9.7g-146.22.44.1 is installed OR compat-openssl097g-32bit-0.9.7g-146.22.44.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kgraft-patch-3_12_60-52_54-default-2-2.2 is installed OR kgraft-patch-3_12_60-52_54-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_15-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information openvpn-2.3.8-16.17.1 is installed OR openvpn-auth-pam-plugin-2.3.8-16.17.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND Package Information libpacemaker3-1.1.16-4 is installed OR pacemaker-1.1.16-4 is installed OR pacemaker-cli-1.1.16-4 is installed OR pacemaker-cts-1.1.16-4 is installed OR pacemaker-remote-1.1.16-4 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND Package Information cluster-md-kmp-default-4.12.14-94.41 is installed OR dlm-kmp-default-4.12.14-94.41 is installed OR gfs2-kmp-default-4.12.14-94.41 is installed OR ocfs2-kmp-default-4.12.14-94.41 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information cpio-2.11-36.3 is installed OR cpio-lang-2.11-36.3 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-4_4_59-92_20-default-7-2 is installed OR kgraft-patch-SLE12-SP2_Update_8-7-2 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP3 is installed AND Package Information kgraft-patch-4_4_82-6_6-default-1-2.1 is installed OR kgraft-patch-SLE12-SP3_Update_2-1-2.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND python-pycrypto-2.6.1-10.3.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND python-PyYAML-3.10-15 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information java-1_6_0-ibm-1.6.0_sr16.1-5 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr16.1-5 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr16.1-5 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND Package Information kernel-ec2-3.12.43-52.6.1 is installed OR kernel-ec2-devel-3.12.43-52.6.1 is installed OR kernel-ec2-extra-3.12.43-52.6.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND python3-3.4.1-2 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 12 SP2 is installed AND python-pycrypto-2.6.1-10.3.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP1 is installed AND Package Information kernel-compute-3.12.58-14.1 is installed OR kernel-compute-base-3.12.58-14.1 is installed OR kernel-compute-devel-3.12.58-14.1 is installed OR kernel-compute_debug-3.12.58-14.1 is installed OR kernel-compute_debug-devel-3.12.58-14.1 is installed OR kernel-devel-rt-3.12.58-14.1 is installed OR kernel-rt-3.12.58-14.1 is installed OR kernel-rt-base-3.12.58-14.1 is installed OR kernel-rt-devel-3.12.58-14.1 is installed OR kernel-rt_debug-3.12.58-14.1 is installed OR kernel-rt_debug-devel-3.12.58-14.1 is installed OR kernel-source-rt-3.12.58-14.1 is installed OR kernel-syms-rt-3.12.58-14.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information kdelibs4-4.1.3-8.18.1 is installed OR kdelibs4-core-4.1.3-8.18.1 is installed OR libkde4-4.1.3-8.18.1 is installed OR libkde4-32bit-4.1.3-8.18.1 is installed OR libkde4-x86-4.1.3-8.18.1 is installed OR libkdecore4-4.1.3-8.18.1 is installed OR libkdecore4-32bit-4.1.3-8.18.1 is installed OR libkdecore4-x86-4.1.3-8.18.1 is installed OR utempter-0.5.5-106.18 is installed OR utempter-32bit-0.5.5-106.18 is installed OR utempter-x86-0.5.5-106.18 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND NetworkManager-gnome-0.7.1-5.22.28 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information Mesa-9.0.3-0.17.1 is installed OR Mesa-32bit-9.0.3-0.17.1 is installed OR Mesa-x86-9.0.3-0.17.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information ntp-4.2.8p2-2.18 is installed OR ntp-doc-4.2.8p2-2.18 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND ant-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information DirectFB-1.7.1-4 is installed OR lib++dfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-1.7.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information libmysqlclient18-10.0.28-17.2 is installed OR libmysqlclient18-32bit-10.0.28-17.2 is installed OR mariadb-10.0.28-17.2 is installed OR mariadb-client-10.0.28-17.2 is installed OR mariadb-errormessages-10.0.28-17.2 is installed OR mariadb-tools-10.0.28-17.2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND libXfont1-1.5.1-10 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information apache-commons-daemon-1.0.15-6 is installed OR apache-commons-daemon-javadoc-1.0.15-6 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed OR SUSE Linux Enterprise Software Development Kit 12 SP5 is installed AND MozillaFirefox-devel-91.6.0-112.89.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_55-52_42-default-7-2.1 is installed OR kgraft-patch-3_12_55-52_42-xen-7-2.1 is installed OR kgraft-patch-SLE12_Update_12-7-2.1 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information xorg-x11-server-1.19.6-8.16 is installed OR xorg-x11-server-extra-1.19.6-8.16 is installed OR xorg-x11-server-sdk-1.19.6-8.16 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND ant-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_60-52_49-default-4-2 is installed OR kgraft-patch-3_12_60-52_49-xen-4-2 is installed OR kgraft-patch-SLE12_Update_14-4-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information xen-4.5.5_12-22.18 is installed OR xen-doc-html-4.5.5_12-22.18 is installed OR xen-kmp-default-4.5.5_12_k3.12.74_60.64.45-22.18 is installed OR xen-libs-4.5.5_12-22.18 is installed OR xen-libs-32bit-4.5.5_12-22.18 is installed OR xen-tools-4.5.5_12-22.18 is installed OR xen-tools-domU-4.5.5_12-22.18 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND MozillaFirefox-devel-31.7.0esr-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information ImageMagick-6.8.8.1-5 is installed OR ImageMagick-devel-6.8.8.1-5 is installed OR libMagick++-6_Q16-3-6.8.8.1-5 is installed OR libMagick++-devel-6.8.8.1-5 is installed OR perl-PerlMagick-6.8.8.1-5 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information kernel-docs-4.4.38-93.3 is installed OR kernel-obs-build-4.4.38-93.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information cups-ddk-1.7.5-19 is installed OR cups-devel-1.7.5-19 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information ImageMagick-6.8.8.1-71.85 is installed OR ImageMagick-devel-6.8.8.1-71.85 is installed OR libMagick++-6_Q16-3-6.8.8.1-71.85 is installed OR libMagick++-devel-6.8.8.1-71.85 is installed OR perl-PerlMagick-6.8.8.1-71.85 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information libreoffice-4.3.3.2-6.1 is installed OR libreoffice-base-4.3.3.2-6.1 is installed OR libreoffice-base-drivers-mysql-4.3.3.2-6.1 is installed OR libreoffice-base-drivers-postgresql-4.3.3.2-6.1 is installed OR libreoffice-calc-4.3.3.2-6.1 is installed OR libreoffice-calc-extensions-4.3.3.2-6.1 is installed OR libreoffice-draw-4.3.3.2-6.1 is installed OR libreoffice-filters-optional-4.3.3.2-6.1 is installed OR libreoffice-gnome-4.3.3.2-6.1 is installed OR libreoffice-icon-theme-tango-4.3.3.2-6.1 is installed OR libreoffice-impress-4.3.3.2-6.1 is installed OR libreoffice-l10n-af-4.3.3.2-6.1 is installed OR libreoffice-l10n-ar-4.3.3.2-6.1 is installed OR libreoffice-l10n-ca-4.3.3.2-6.1 is installed OR libreoffice-l10n-cs-4.3.3.2-6.1 is installed OR libreoffice-l10n-da-4.3.3.2-6.1 is installed OR libreoffice-l10n-de-4.3.3.2-6.1 is installed OR libreoffice-l10n-en-4.3.3.2-6.1 is installed OR libreoffice-l10n-es-4.3.3.2-6.1 is installed OR libreoffice-l10n-fi-4.3.3.2-6.1 is installed OR libreoffice-l10n-fr-4.3.3.2-6.1 is installed OR libreoffice-l10n-gu-4.3.3.2-6.1 is installed OR libreoffice-l10n-hi-4.3.3.2-6.1 is installed OR libreoffice-l10n-hu-4.3.3.2-6.1 is installed OR libreoffice-l10n-it-4.3.3.2-6.1 is installed OR libreoffice-l10n-ja-4.3.3.2-6.1 is installed OR libreoffice-l10n-ko-4.3.3.2-6.1 is installed OR libreoffice-l10n-nb-4.3.3.2-6.1 is installed OR libreoffice-l10n-nl-4.3.3.2-6.1 is installed OR libreoffice-l10n-nn-4.3.3.2-6.1 is installed OR libreoffice-l10n-pl-4.3.3.2-6.1 is installed OR libreoffice-l10n-pt-BR-4.3.3.2-6.1 is installed OR libreoffice-l10n-pt-PT-4.3.3.2-6.1 is installed OR libreoffice-l10n-ru-4.3.3.2-6.1 is installed OR libreoffice-l10n-sk-4.3.3.2-6.1 is installed OR libreoffice-l10n-sv-4.3.3.2-6.1 is installed OR libreoffice-l10n-xh-4.3.3.2-6.1 is installed OR libreoffice-l10n-zh-Hans-4.3.3.2-6.1 is installed OR libreoffice-l10n-zh-Hant-4.3.3.2-6.1 is installed OR libreoffice-l10n-zu-4.3.3.2-6.1 is installed OR libreoffice-mailmerge-4.3.3.2-6.1 is installed OR libreoffice-math-4.3.3.2-6.1 is installed OR libreoffice-officebean-4.3.3.2-6.1 is installed OR libreoffice-pyuno-4.3.3.2-6.1 is installed OR libreoffice-writer-4.3.3.2-6.1 is installed OR libreoffice-writer-extensions-4.3.3.2-6.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information gstreamer-0_10-plugins-bad-0.10.23-19.3.4 is installed OR gstreamer-0_10-plugins-bad-lang-0.10.23-19.3.4 is installed OR libgstbasecamerabinsrc-0_10-23-0.10.23-19.3.4 is installed OR libgstbasecamerabinsrc-0_10-23-32bit-0.10.23-19.3.4 is installed OR libgstbasevideo-0_10-23-0.10.23-19.3.4 is installed OR libgstbasevideo-0_10-23-32bit-0.10.23-19.3.4 is installed OR libgstcodecparsers-0_10-23-0.10.23-19.3.4 is installed OR libgstphotography-0_10-23-0.10.23-19.3.4 is installed OR libgstphotography-0_10-23-32bit-0.10.23-19.3.4 is installed OR libgstsignalprocessor-0_10-23-0.10.23-19.3.4 is installed OR libgstsignalprocessor-0_10-23-32bit-0.10.23-19.3.4 is installed OR libgstvdp-0_10-23-0.10.23-19.3.4 is installed OR libgstvdp-0_10-23-32bit-0.10.23-19.3.4 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information libpcrecpp0-8.39-7.1 is installed OR libpcrecpp0-32bit-8.39-7.1 is installed OR pcre-8.39-7.1 is installed
BACK