Oval Definition:oval:org.opensuse.security:def:53829
Revision Date:2020-12-01Version:1
Title:Security update for MozillaThunderbird (Important)
Description:

This update for MozillaThunderbird version 60.8 fixes the following issues:

Security issues fixed:

- CVE-2019-9811: Sandbox escape via installation of malicious language pack (bsc#1140868). - CVE-2019-11711: Script injection within domain through inner window reuse (bsc#1140868). - CVE-2019-11712: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects (bsc#1140868). - CVE-2019-11713: Use-after-free with HTTP/2 cached stream (bsc#1140868). - CVE-2019-11729: Empty or malformed p256-ECDH public keys may trigger a segmentation fault (bsc#1140868). - CVE-2019-11715: HTML parsing error can contribute to content XSS (bsc#1140868). - CVE-2019-11717: Caret character improperly escaped in origins (bsc#1140868). - CVE-2019-11719: Out-of-bounds read when importing curve25519 private key (bsc#1140868). - CVE-2019-11730: Same-origin policy treats all files in a directory as having the same-origin (bsc#1140868). - CVE-2019-11709: Multiple Memory safety bugs fixed (bsc#1140868).

Non-security issued fixed:

- Calendar: Problems when editing event times, some related to AM/PM setting in non-English locales
Family:unixClass:patch
Status:Reference(s):1008029
1010845
1014172
1030050
1035283
1035371
1040107
1040114
1042948
1049373
1051412
1052252
1052522
1052771
1058082
1062631
1072902
1074122
1074171
1074425
1074610
1075737
1075738
1075739
1075748
1115750
1140868
1146025
1157627
1165849
1172053
1172189
1172795
1172796
914660
928131
943380
946148
952539
956631
986247
CVE-2009-2285
CVE-2009-2347
CVE-2010-2065
CVE-2010-2067
CVE-2010-2233
CVE-2010-4665
CVE-2011-0020
CVE-2011-0064
CVE-2011-0192
CVE-2011-1167
CVE-2012-1173
CVE-2012-2113
CVE-2012-3355
CVE-2012-3401
CVE-2012-4564
CVE-2013-1960
CVE-2013-1961
CVE-2013-1984
CVE-2013-1995
CVE-2013-1998
CVE-2013-4231
CVE-2013-4232
CVE-2013-4243
CVE-2013-4244
CVE-2014-8127
CVE-2014-8128
CVE-2014-8129
CVE-2014-8130
CVE-2014-9645
CVE-2014-9655
CVE-2015-1547
CVE-2015-7554
CVE-2015-8370
CVE-2015-8665
CVE-2015-8683
CVE-2015-8781
CVE-2015-8782
CVE-2015-8783
CVE-2016-10095
CVE-2016-10266
CVE-2016-10267
CVE-2016-10268
CVE-2016-10269
CVE-2016-10270
CVE-2016-10271
CVE-2016-10272
CVE-2016-10371
CVE-2016-3186
CVE-2016-3622
CVE-2016-3623
CVE-2016-3632
CVE-2016-3658
CVE-2016-3945
CVE-2016-3990
CVE-2016-3991
CVE-2016-5314
CVE-2016-5316
CVE-2016-5317
CVE-2016-5318
CVE-2016-5319
CVE-2016-5320
CVE-2016-5321
CVE-2016-5323
CVE-2016-5652
CVE-2016-5773
CVE-2016-5875
CVE-2016-7945
CVE-2016-7946
CVE-2016-8331
CVE-2016-9042
CVE-2016-9137
CVE-2016-9273
CVE-2016-9297
CVE-2016-9401
CVE-2016-9448
CVE-2016-9453
CVE-2016-9538
CVE-2017-1000445
CVE-2017-1000476
CVE-2017-10971
CVE-2017-10972
CVE-2017-11449
CVE-2017-11613
CVE-2017-11751
CVE-2017-12430
CVE-2017-12596
CVE-2017-12642
CVE-2017-14249
CVE-2017-16232
CVE-2017-17680
CVE-2017-17882
CVE-2017-17935
CVE-2017-17942
CVE-2017-17973
CVE-2017-18013
CVE-2017-5225
CVE-2017-6451
CVE-2017-6458
CVE-2017-6460
CVE-2017-6462
CVE-2017-6463
CVE-2017-6464
CVE-2017-7592
CVE-2017-7593
CVE-2017-7594
CVE-2017-7595
CVE-2017-7596
CVE-2017-7597
CVE-2017-7598
CVE-2017-7599
CVE-2017-7600
CVE-2017-7601
CVE-2017-7602
CVE-2017-9110
CVE-2017-9114
CVE-2017-9403
CVE-2017-9404
CVE-2017-9409
CVE-2017-9935
CVE-2017-9936
CVE-2018-10779
CVE-2018-10963
CVE-2018-16335
CVE-2018-17100
CVE-2018-17101
CVE-2018-17795
CVE-2018-4700
CVE-2018-5334
CVE-2018-5335
CVE-2018-5336
CVE-2018-5784
CVE-2018-7456
CVE-2018-8905
CVE-2019-11709
CVE-2019-11711
CVE-2019-11712
CVE-2019-11713
CVE-2019-11715
CVE-2019-11717
CVE-2019-11719
CVE-2019-11729
CVE-2019-11730
CVE-2019-9811
CVE-2020-12802
CVE-2020-12803
SUSE-SU-2015:1445-1
SUSE-SU-2015:2399-1
SUSE-SU-2016:2975-1
SUSE-SU-2017:1048-1
SUSE-SU-2017:1317-1
SUSE-SU-2017:1860-1
SUSE-SU-2018:0055-1
SUSE-SU-2018:0191-1
SUSE-SU-2018:0585-1
SUSE-SU-2018:4089-1
SUSE-SU-2019:1960-1
SUSE-SU-2020:2235-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE Linux Enterprise Workstation Extension 15 SP2
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • MozillaFirefox-60.0-lp150.2 is installed
  • OR MozillaFirefox-translations-common-60.0-lp150.2 is installed
  • OR MozillaFirefox-translations-other-60.0-lp150.2 is installed
    • Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND osc-0.165.4-lp151.2.6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • AND Package Information
  • Mesa-7.11.2-0.9 is installed
  • OR Mesa-32bit-7.11.2-0.9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • krb5-1.6.3-133.49.66 is installed
  • OR krb5-32bit-1.6.3-133.49.66 is installed
  • OR krb5-client-1.6.3-133.49.66 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP4 is installed
  • AND Package Information
  • compat-openssl097g-0.9.7g-146.22.41 is installed
  • OR compat-openssl097g-32bit-0.9.7g-146.22.41 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • grub2-2.02~beta2-56.9 is installed
  • OR grub2-i386-pc-2.02~beta2-56.9 is installed
  • OR grub2-snapper-plugin-2.02~beta2-56.9 is installed
  • OR grub2-x86_64-efi-2.02~beta2-56.9 is installed
  • OR grub2-x86_64-xen-2.02~beta2-56.9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • imap-2007e_suse-22 is installed
  • OR libc-client2007e_suse-2007e_suse-22 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • xorg-x11-server-7.6_1.18.3-74 is installed
  • OR xorg-x11-server-extra-7.6_1.18.3-74 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • libwireshark8-2.2.12-48.18 is installed
  • OR libwiretap6-2.2.12-48.18 is installed
  • OR libwscodecs1-2.2.12-48.18 is installed
  • OR libwsutil7-2.2.12-48.18 is installed
  • OR wireshark-2.2.12-48.18 is installed
  • OR wireshark-gtk-2.2.12-48.18 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • libXi6-1.7.4-17 is installed
  • OR libXi6-32bit-1.7.4-17 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • bind-9.9.6P1-30 is installed
  • OR bind-chrootenv-9.9.6P1-30 is installed
  • OR bind-doc-9.9.6P1-30 is installed
  • OR bind-libs-9.9.6P1-30 is installed
  • OR bind-libs-32bit-9.9.6P1-30 is installed
  • OR bind-utils-9.9.6P1-30 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • libspice-server1-0.12.5-10 is installed
  • OR spice-0.12.5-10 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • libjasper1-1.900.1-170 is installed
  • OR libjasper1-32bit-1.900.1-170 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND sudo-1.8.10p3-10.23 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • xen-4.7.6_05-43.42 is installed
  • OR xen-doc-html-4.7.6_05-43.42 is installed
  • OR xen-libs-4.7.6_05-43.42 is installed
  • OR xen-libs-32bit-4.7.6_05-43.42 is installed
  • OR xen-tools-4.7.6_05-43.42 is installed
  • OR xen-tools-domU-4.7.6_05-43.42 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_74-92_38-default-10-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_13-10-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND ctags-5.8-7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • libmysqlclient18-10.0.40.2-29.35 is installed
  • OR libmysqlclient18-32bit-10.0.40.2-29.35 is installed
  • OR mariadb-10.0.40.2-29.35 is installed
  • OR mariadb-client-10.0.40.2-29.35 is installed
  • OR mariadb-errormessages-10.0.40.2-29.35 is installed
  • OR mariadb-tools-10.0.40.2-29.35 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND Package Information
  • MozillaFirefox-60.8.0-109.83 is installed
  • OR MozillaFirefox-translations-common-60.8.0-109.83 is installed
  • OR libfreebl3-3.44.1-58.28 is installed
  • OR libfreebl3-32bit-3.44.1-58.28 is installed
  • OR libfreebl3-hmac-3.44.1-58.28 is installed
  • OR libfreebl3-hmac-32bit-3.44.1-58.28 is installed
  • OR libsoftokn3-3.44.1-58.28 is installed
  • OR libsoftokn3-32bit-3.44.1-58.28 is installed
  • OR libsoftokn3-hmac-3.44.1-58.28 is installed
  • OR libsoftokn3-hmac-32bit-3.44.1-58.28 is installed
  • OR mozilla-nss-3.44.1-58.28 is installed
  • OR mozilla-nss-32bit-3.44.1-58.28 is installed
  • OR mozilla-nss-certs-3.44.1-58.28 is installed
  • OR mozilla-nss-certs-32bit-3.44.1-58.28 is installed
  • OR mozilla-nss-sysinit-3.44.1-58.28 is installed
  • OR mozilla-nss-sysinit-32bit-3.44.1-58.28 is installed
  • OR mozilla-nss-tools-3.44.1-58.28 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_175-94_79-default-4-2 is installed
  • OR kgraft-patch-SLE12-SP3_Update_23-4-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • libpython3_4m1_0-3.4.6-25.16 is installed
  • OR python3-3.4.6-25.16 is installed
  • OR python3-base-3.4.6-25.16 is installed
  • OR python3-curses-3.4.6-25.16 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • cups-pk-helper-0.2.5-5 is installed
  • OR cups-pk-helper-lang-0.2.5-5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND Package Information
  • MozillaThunderbird-60.8.0-3.46 is installed
  • OR MozillaThunderbird-translations-common-60.8.0-3.46 is installed
  • OR MozillaThunderbird-translations-other-60.8.0-3.46 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP2 is installed
  • AND Package Information
  • libreoffice-6.4.5.2-13.3 is installed
  • OR libreoffice-base-6.4.5.2-13.3 is installed
  • OR libreoffice-base-drivers-postgresql-6.4.5.2-13.3 is installed
  • OR libreoffice-branding-upstream-6.4.5.2-13.3 is installed
  • OR libreoffice-calc-6.4.5.2-13.3 is installed
  • OR libreoffice-calc-extensions-6.4.5.2-13.3 is installed
  • OR libreoffice-draw-6.4.5.2-13.3 is installed
  • OR libreoffice-filters-optional-6.4.5.2-13.3 is installed
  • OR libreoffice-gnome-6.4.5.2-13.3 is installed
  • OR libreoffice-gtk3-6.4.5.2-13.3 is installed
  • OR libreoffice-icon-themes-6.4.5.2-13.3 is installed
  • OR libreoffice-impress-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-af-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-ar-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-as-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-bg-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-bn-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-br-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-ca-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-cs-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-cy-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-da-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-de-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-dz-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-el-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-en-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-eo-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-es-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-et-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-eu-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-fa-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-fi-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-fr-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-ga-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-gl-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-gu-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-he-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-hi-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-hr-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-hu-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-it-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-ja-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-kk-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-kn-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-ko-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-lt-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-lv-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-mai-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-ml-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-mr-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-nb-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-nl-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-nn-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-nr-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-nso-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-or-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-pa-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-pl-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-pt_BR-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-pt_PT-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-ro-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-ru-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-si-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-sk-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-sl-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-sr-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-ss-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-st-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-sv-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-ta-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-te-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-th-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-tn-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-tr-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-ts-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-uk-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-ve-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-xh-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-zh_CN-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-zh_TW-6.4.5.2-13.3 is installed
  • OR libreoffice-l10n-zu-6.4.5.2-13.3 is installed
  • OR libreoffice-mailmerge-6.4.5.2-13.3 is installed
  • OR libreoffice-math-6.4.5.2-13.3 is installed
  • OR libreoffice-officebean-6.4.5.2-13.3 is installed
  • OR libreoffice-pyuno-6.4.5.2-13.3 is installed
  • OR libreoffice-writer-6.4.5.2-13.3 is installed
  • OR libreoffice-writer-extensions-6.4.5.2-13.3 is installed
  • OR libreofficekit-6.4.5.2-13.3 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 6 is installed
  • AND Package Information
  • ruby2.1-rubygem-chef-10.32.2-3 is installed
  • OR ruby2.1-rubygem-chef-expander-10.32.2-1 is installed
  • OR ruby2.1-rubygem-chef-server-10.32.2-1 is installed
  • OR ruby2.1-rubygem-chef-server-api-10.32.2-4 is installed
  • OR ruby2.1-rubygem-chef-solr-10.32.2-1 is installed
  • OR rubygem-chef-10.32.2-3 is installed
  • OR rubygem-chef-expander-10.32.2-1 is installed
  • OR rubygem-chef-server-api-10.32.2-4 is installed
  • OR rubygem-chef-solr-10.32.2-1 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • res-signingkeys-3.0.38-52.26 is installed
  • OR smt-3.0.38-52.26 is installed
  • OR smt-support-3.0.38-52.26 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • grafana-4.5.1-4.3 is installed
  • OR kafka-0.9.0.1-5.3 is installed
  • OR logstash-2.4.1-5.4 is installed
  • OR openstack-monasca-installer-20180622_15.06-3.6 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND Package Information
  • libjavascriptcoregtk-4_0-18-2.24.4-2.47 is installed
  • OR libwebkit2gtk-4_0-37-2.24.4-2.47 is installed
  • OR libwebkit2gtk3-lang-2.24.4-2.47 is installed
  • OR typelib-1_0-JavaScriptCore-4_0-2.24.4-2.47 is installed
  • OR typelib-1_0-WebKit2-4_0-2.24.4-2.47 is installed
  • OR webkit2gtk-4_0-injected-bundles-2.24.4-2.47 is installed
  • OR webkit2gtk3-2.24.4-2.47 is installed
    • BACK