Oval Definition:	oval:org.opensuse.security:def:55132
Revision Date: 2020-12-21 Version: 1 Title: Security update for MozillaFirefox (Critical) Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.6.0 ESR * Fixed: Various stability, functionality, and security fixes MFSA 2020-55 (bsc#1180039) * CVE-2020-16042 (bmo#1679003) Operations on a BigInt could have caused uninitialized memory to be exposed * CVE-2020-26971 (bmo#1663466) Heap buffer overflow in WebGL * CVE-2020-26973 (bmo#1680084) CSS Sanitizer performed incorrect sanitization * CVE-2020-26974 (bmo#1681022) Incorrect cast of StyleGenericFlexBasis resulted in a heap use-after-free * CVE-2020-26978 (bmo#1677047) Internal network hosts could have been probed by a malicious webpage * CVE-2020-35111 (bmo#1657916) The proxy.onRequest API did not catch view-source URLs * CVE-2020-35112 (bmo#1661365) Opening an extension-less download may have inadvertently launched an executable instead * CVE-2020-35113 (bmo#1664831, bmo#1673589) Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6 Family: unix Class: patch Status: Reference(s): 1049302 1049305 1049306 1049307 1049308 1049309 1049310 1049311 1049312 1049313 1049314 1049315 1049316 1049317 1049318 1049319 1049320 1049321 1049322 1049323 1049324 1049325 1049326 1049327 1049328 1049329 1049330 1049331 1049332 1052916 1053431 1057246 1064127 1086036 1092548 1094301 1100097 1101776 1101777 1101786 1101788 1101791 1101794 1101800 1101802 1101804 1101810 1106514 1113064 1117463 1123361 1123522 1159105 1180039 306333 547549 668145 679938 681560 688200 718113 73544 792432 806250 813026 819204 825935 827568 857026 866278 889755 890735 907636 907966 910805 910806 914911 934423 936188 936190 939996 940838 943075 945047 945692 951579 954345 CVE-2010-3170 CVE-2011-1018 CVE-2011-3389 CVE-2011-3640 CVE-2013-0743 CVE-2013-0791 CVE-2013-1620 CVE-2013-1682 CVE-2013-1684 CVE-2013-1685 CVE-2013-1686 CVE-2013-1687 CVE-2013-1690 CVE-2013-1692 CVE-2013-1693 CVE-2013-1697 CVE-2013-1739 CVE-2013-1740 CVE-2013-2217 CVE-2013-5605 CVE-2014-0017 CVE-2014-1492 CVE-2014-1568 CVE-2014-1569 CVE-2014-8146 CVE-2014-8147 CVE-2014-9093 CVE-2015-4000 CVE-2015-4551 CVE-2015-5212 CVE-2015-5213 CVE-2015-5214 CVE-2015-7181 CVE-2015-7182 CVE-2015-7575 CVE-2016-1938 CVE-2016-1950 CVE-2016-1978 CVE-2016-1979 CVE-2016-2834 CVE-2016-5285 CVE-2016-8635 CVE-2016-9074 CVE-2016-9574 CVE-2017-10053 CVE-2017-10067 CVE-2017-10074 CVE-2017-10078 CVE-2017-10081 CVE-2017-10086 CVE-2017-10087 CVE-2017-10089 CVE-2017-10090 CVE-2017-10096 CVE-2017-10101 CVE-2017-10102 CVE-2017-10105 CVE-2017-10107 CVE-2017-10108 CVE-2017-10109 CVE-2017-10110 CVE-2017-10111 CVE-2017-10114 CVE-2017-10115 CVE-2017-10116 CVE-2017-10118 CVE-2017-10125 CVE-2017-10135 CVE-2017-10176 CVE-2017-10193 CVE-2017-10198 CVE-2017-10243 CVE-2017-15638 CVE-2017-2885 CVE-2017-5838 CVE-2017-7805 CVE-2018-11354 CVE-2018-11355 CVE-2018-11356 CVE-2018-11357 CVE-2018-11358 CVE-2018-11359 CVE-2018-11360 CVE-2018-11361 CVE-2018-11362 CVE-2018-12910 CVE-2018-14339 CVE-2018-14340 CVE-2018-14341 CVE-2018-14342 CVE-2018-14343 CVE-2018-14344 CVE-2018-14367 CVE-2018-14368 CVE-2018-14369 CVE-2018-14370 CVE-2018-16056 CVE-2018-16057 CVE-2018-16058 CVE-2018-18544 CVE-2018-5150 CVE-2018-5154 CVE-2018-5155 CVE-2018-5157 CVE-2018-5158 CVE-2018-5159 CVE-2018-5168 CVE-2018-5174 CVE-2018-5178 CVE-2018-5183 CVE-2019-6977 CVE-2019-6978 CVE-2020-16042 CVE-2020-26971 CVE-2020-26973 CVE-2020-26974 CVE-2020-26978 CVE-2020-35111 CVE-2020-35112 CVE-2020-35113 SUSE-SU-2016:0324-1 SUSE-SU-2016:2704-1 SUSE-SU-2017:2175-1 SUSE-SU-2017:2263-1 SUSE-SU-2017:2935-1 SUSE-SU-2018:1334-1 SUSE-SU-2018:2204-1 SUSE-SU-2018:2891-1 SUSE-SU-2018:4023-1 SUSE-SU-2019:0747-1 SUSE-SU-2020:0102-1 SUSE-SU-2020:3903-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 openSUSE Leap 15.1 NonFree SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information dbus-1-1.12.2-lp150.1 is installed OR dbus-1-x11-1.12.2-lp150.1 is installed OR libdbus-1-3-1.12.2-lp150.1 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND enigmail-2.0.11-31 is installed Definition Synopsis openSUSE Leap 15.1 NonFree is installed AND opera-65.0.3467.62-lp151.2.9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-17.0.7esr-0.8 is installed OR MozillaFirefox-branding-SLED-7-0.12 is installed OR MozillaFirefox-translations-17.0.7esr-0.8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information google-carlito-fonts-1.1.03.beta1-2 is installed OR hyphen-2.8.8-2 is installed OR libhyphen0-2.8.8-2 is installed OR libmythes-1_2-0-1.2.4-2 is installed OR libreoffice-5.0.4.2-23 is installed OR libreoffice-base-5.0.4.2-23 is installed OR libreoffice-base-drivers-postgresql-5.0.4.2-23 is installed OR libreoffice-calc-5.0.4.2-23 is installed OR libreoffice-calc-extensions-5.0.4.2-23 is installed OR libreoffice-draw-5.0.4.2-23 is installed OR libreoffice-filters-optional-5.0.4.2-23 is installed OR libreoffice-gnome-5.0.4.2-23 is installed OR libreoffice-icon-theme-galaxy-5.0.4.2-23 is installed OR libreoffice-icon-theme-tango-5.0.4.2-23 is installed OR libreoffice-impress-5.0.4.2-23 is installed OR libreoffice-kde4-5.0.4.2-23 is installed OR libreoffice-l10n-af-5.0.4.2-23 is installed OR libreoffice-l10n-ar-5.0.4.2-23 is installed OR libreoffice-l10n-ca-5.0.4.2-23 is installed OR libreoffice-l10n-cs-5.0.4.2-23 is installed OR libreoffice-l10n-da-5.0.4.2-23 is installed OR libreoffice-l10n-de-5.0.4.2-23 is installed OR libreoffice-l10n-en-5.0.4.2-23 is installed OR libreoffice-l10n-es-5.0.4.2-23 is installed OR libreoffice-l10n-fi-5.0.4.2-23 is installed OR libreoffice-l10n-fr-5.0.4.2-23 is installed OR libreoffice-l10n-gu-5.0.4.2-23 is installed OR libreoffice-l10n-hi-5.0.4.2-23 is installed OR libreoffice-l10n-hu-5.0.4.2-23 is installed OR libreoffice-l10n-it-5.0.4.2-23 is installed OR libreoffice-l10n-ja-5.0.4.2-23 is installed OR libreoffice-l10n-ko-5.0.4.2-23 is installed OR libreoffice-l10n-nb-5.0.4.2-23 is installed OR libreoffice-l10n-nl-5.0.4.2-23 is installed OR libreoffice-l10n-nn-5.0.4.2-23 is installed OR libreoffice-l10n-pl-5.0.4.2-23 is installed OR libreoffice-l10n-pt-BR-5.0.4.2-23 is installed OR libreoffice-l10n-pt-PT-5.0.4.2-23 is installed OR libreoffice-l10n-ru-5.0.4.2-23 is installed OR libreoffice-l10n-sk-5.0.4.2-23 is installed OR libreoffice-l10n-sv-5.0.4.2-23 is installed OR libreoffice-l10n-xh-5.0.4.2-23 is installed OR libreoffice-l10n-zh-Hans-5.0.4.2-23 is installed OR libreoffice-l10n-zh-Hant-5.0.4.2-23 is installed OR libreoffice-l10n-zu-5.0.4.2-23 is installed OR libreoffice-mailmerge-5.0.4.2-23 is installed OR libreoffice-math-5.0.4.2-23 is installed OR libreoffice-officebean-5.0.4.2-23 is installed OR libreoffice-pyuno-5.0.4.2-23 is installed OR libreoffice-sdk-5.0.4.2-23 is installed OR libreoffice-share-linker-1-2 is installed OR libreoffice-voikko-4.1-2 is installed OR libreoffice-writer-5.0.4.2-23 is installed OR libreoffice-writer-extensions-5.0.4.2-23 is installed OR libvoikko-3.7.1-5 is installed OR libvoikko1-3.7.1-5 is installed OR myspell-af_NA-20150827-23 is installed OR myspell-af_ZA-20150827-23 is installed OR myspell-ar-20150827-23 is installed OR myspell-ar_AE-20150827-23 is installed OR myspell-ar_BH-20150827-23 is installed OR myspell-ar_DZ-20150827-23 is installed OR myspell-ar_EG-20150827-23 is installed OR myspell-ar_IQ-20150827-23 is installed OR myspell-ar_JO-20150827-23 is installed OR myspell-ar_KW-20150827-23 is installed OR myspell-ar_LB-20150827-23 is installed OR myspell-ar_LY-20150827-23 is installed OR myspell-ar_MA-20150827-23 is installed OR myspell-ar_OM-20150827-23 is installed OR myspell-ar_QA-20150827-23 is installed OR myspell-ar_SA-20150827-23 is installed OR myspell-ar_SD-20150827-23 is installed OR myspell-ar_SY-20150827-23 is installed OR myspell-ar_TN-20150827-23 is installed OR myspell-ar_YE-20150827-23 is installed OR myspell-be_BY-20150827-23 is installed OR myspell-bg_BG-20150827-23 is installed OR myspell-bn_BD-20150827-23 is installed OR myspell-bn_IN-20150827-23 is installed OR myspell-bs-20150827-23 is installed OR myspell-bs_BA-20150827-23 is installed OR myspell-ca-20150827-23 is installed OR myspell-ca_AD-20150827-23 is installed OR myspell-ca_ES-20150827-23 is installed OR myspell-ca_ES_valencia-20150827-23 is installed OR myspell-ca_FR-20150827-23 is installed OR myspell-ca_IT-20150827-23 is installed OR myspell-cs_CZ-20150827-23 is installed OR myspell-da_DK-20150827-23 is installed OR myspell-de-20150827-23 is installed OR myspell-de_AT-20150827-23 is installed OR myspell-de_CH-20150827-23 is installed OR myspell-de_DE-20150827-23 is installed OR myspell-dictionaries-20150827-23 is installed OR myspell-el_GR-20150827-23 is installed OR myspell-en-20150827-23 is installed OR myspell-en_AU-20150827-23 is installed OR myspell-en_BS-20150827-23 is installed OR myspell-en_BZ-20150827-23 is installed OR myspell-en_CA-20150827-23 is installed OR myspell-en_GB-20150827-23 is installed OR myspell-en_GH-20150827-23 is installed OR myspell-en_IE-20150827-23 is installed OR myspell-en_IN-20150827-23 is installed OR myspell-en_JM-20150827-23 is installed OR myspell-en_MW-20150827-23 is installed OR myspell-en_NA-20150827-23 is installed OR myspell-en_NZ-20150827-23 is installed OR myspell-en_PH-20150827-23 is installed OR myspell-en_TT-20150827-23 is installed OR myspell-en_US-20150827-23 is installed OR myspell-en_ZA-20150827-23 is installed OR myspell-en_ZW-20150827-23 is installed OR myspell-es-20150827-23 is installed OR myspell-es_AR-20150827-23 is installed OR myspell-es_BO-20150827-23 is installed OR myspell-es_CL-20150827-23 is installed OR myspell-es_CO-20150827-23 is installed OR myspell-es_CR-20150827-23 is installed OR myspell-es_CU-20150827-23 is installed OR myspell-es_DO-20150827-23 is installed OR myspell-es_EC-20150827-23 is installed OR myspell-es_ES-20150827-23 is installed OR myspell-es_GT-20150827-23 is installed OR myspell-es_HN-20150827-23 is installed OR myspell-es_MX-20150827-23 is installed OR myspell-es_NI-20150827-23 is installed OR myspell-es_PA-20150827-23 is installed OR myspell-es_PE-20150827-23 is installed OR myspell-es_PR-20150827-23 is installed OR myspell-es_PY-20150827-23 is installed OR myspell-es_SV-20150827-23 is installed OR myspell-es_UY-20150827-23 is installed OR myspell-es_VE-20150827-23 is installed OR myspell-et_EE-20150827-23 is installed OR myspell-fr_BE-20150827-23 is installed OR myspell-fr_CA-20150827-23 is installed OR myspell-fr_CH-20150827-23 is installed OR myspell-fr_FR-20150827-23 is installed OR myspell-fr_LU-20150827-23 is installed OR myspell-fr_MC-20150827-23 is installed OR myspell-gu_IN-20150827-23 is installed OR myspell-he_IL-20150827-23 is installed OR myspell-hi_IN-20150827-23 is installed OR myspell-hr_HR-20150827-23 is installed OR myspell-hu_HU-20150827-23 is installed OR myspell-it_IT-20150827-23 is installed OR myspell-lightproof-en-20150827-23 is installed OR myspell-lightproof-hu_HU-20150827-23 is installed OR myspell-lightproof-pt_BR-20150827-23 is installed OR myspell-lightproof-ru_RU-20150827-23 is installed OR myspell-lo_LA-20150827-23 is installed OR myspell-lt_LT-20150827-23 is installed OR myspell-lv_LV-20150827-23 is installed OR myspell-nb_NO-20150827-23 is installed OR myspell-nl_BE-20150827-23 is installed OR myspell-nl_NL-20150827-23 is installed OR myspell-nn_NO-20150827-23 is installed OR myspell-no-20150827-23 is installed OR myspell-pl_PL-20150827-23 is installed OR myspell-pt_AO-20150827-23 is installed OR myspell-pt_BR-20150827-23 is installed OR myspell-pt_PT-20150827-23 is installed OR myspell-ro-20150827-23 is installed OR myspell-ro_RO-20150827-23 is installed OR myspell-ru_RU-20150827-23 is installed OR myspell-sk_SK-20150827-23 is installed OR myspell-sl_SI-20150827-23 is installed OR myspell-sr-20150827-23 is installed OR myspell-sr_CS-20150827-23 is installed OR myspell-sr_Latn_CS-20150827-23 is installed OR myspell-sr_Latn_RS-20150827-23 is installed OR myspell-sr_RS-20150827-23 is installed OR myspell-sv_FI-20150827-23 is installed OR myspell-sv_SE-20150827-23 is installed OR myspell-te-20150827-23 is installed OR myspell-te_IN-20150827-23 is installed OR myspell-th_TH-20150827-23 is installed OR myspell-vi-20150827-23 is installed OR myspell-vi_VN-20150827-23 is installed OR myspell-zu_ZA-20150827-23 is installed OR mythes-1.2.4-2 is installed OR python-importlib-1.0.2-0.8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND SuSEfirewall2-3.6.312.333-3.10 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information gstreamer-1.8.3-9 is installed OR gstreamer-lang-1.8.3-9 is installed OR gstreamer-utils-1.8.3-9 is installed OR libgstreamer-1_0-0-1.8.3-9 is installed OR libgstreamer-1_0-0-32bit-1.8.3-9 is installed OR typelib-1_0-Gst-1_0-1.8.3-9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND logwatch-7.4.0-13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_40-default-7-2 is installed OR kgraft-patch-3_12_74-60_64_40-xen-7-2 is installed OR kgraft-patch-SLE12-SP1_Update_15-7-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND cifs-utils-6.5-8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information MozillaFirefox-78.6.0-112.39.1 is installed OR MozillaFirefox-devel-78.6.0-112.39.1 is installed OR MozillaFirefox-translations-common-78.6.0-112.39.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information libjavascriptcoregtk-4_0-18-2.24.1-2.41 is installed OR libwebkit2gtk-4_0-37-2.24.1-2.41 is installed OR libwebkit2gtk3-lang-2.24.1-2.41 is installed OR typelib-1_0-JavaScriptCore-4_0-2.24.1-2.41 is installed OR typelib-1_0-WebKit2-4_0-2.24.1-2.41 is installed OR typelib-1_0-WebKit2WebExtension-4_0-2.24.1-2.41 is installed OR webkit2gtk-4_0-injected-bundles-2.24.1-2.41 is installed OR webkit2gtk3-2.24.1-2.41 is installed OR webkit2gtk3-devel-2.24.1-2.41 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_120-92_70-default-4-2 is installed OR kgraft-patch-SLE12-SP2_Update_20-4-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information fontconfig-2.11.1-7 is installed OR fontconfig-32bit-2.11.1-7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information libopenssl-devel-1.0.2j-60.55 is installed OR libopenssl1_0_0-1.0.2j-60.55 is installed OR libopenssl1_0_0-32bit-1.0.2j-60.55 is installed OR libopenssl1_0_0-hmac-1.0.2j-60.55 is installed OR libopenssl1_0_0-hmac-32bit-1.0.2j-60.55 is installed OR openssl-1.0.2j-60.55 is installed OR openssl-doc-1.0.2j-60.55 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information libjavascriptcoregtk-4_0-18-2.24.4-2.47 is installed OR libwebkit2gtk-4_0-37-2.24.4-2.47 is installed OR libwebkit2gtk3-lang-2.24.4-2.47 is installed OR typelib-1_0-JavaScriptCore-4_0-2.24.4-2.47 is installed OR typelib-1_0-WebKit2-4_0-2.24.4-2.47 is installed OR webkit2gtk-4_0-injected-bundles-2.24.4-2.47 is installed OR webkit2gtk3-2.24.4-2.47 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information tomcat-8.0.53-29.27 is installed OR tomcat-admin-webapps-8.0.53-29.27 is installed OR tomcat-docs-webapp-8.0.53-29.27 is installed OR tomcat-el-3_0-api-8.0.53-29.27 is installed OR tomcat-javadoc-8.0.53-29.27 is installed OR tomcat-jsp-2_3-api-8.0.53-29.27 is installed OR tomcat-lib-8.0.53-29.27 is installed OR tomcat-servlet-3_1-api-8.0.53-29.27 is installed OR tomcat-webapps-8.0.53-29.27 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libecpg6-10.6-1.6 is installed OR libpq5-10.6-1.6 is installed OR libpq5-32bit-10.6-1.6 is installed OR postgresql10-10.6-1.6 is installed OR postgresql10-contrib-10.6-1.6 is installed OR postgresql10-docs-10.6-1.6 is installed OR postgresql10-libs-10.6-1.6 is installed OR postgresql10-server-10.6-1.6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information libXvnc1-1.6.0-18.23 is installed OR tigervnc-1.6.0-18.23 is installed OR xorg-x11-Xvnc-1.6.0-18.23 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND python-suds-jurko-0.6-4 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information MozillaFirefox-60.4.0esr-109.55 is installed OR MozillaFirefox-devel-60.4.0esr-109.55 is installed OR MozillaFirefox-translations-common-60.4.0esr-109.55 is installed OR libfreebl3-3.40.1-58.18 is installed OR libfreebl3-32bit-3.40.1-58.18 is installed OR libsoftokn3-3.40.1-58.18 is installed OR libsoftokn3-32bit-3.40.1-58.18 is installed OR mozilla-nspr-4.20-19.6 is installed OR mozilla-nspr-32bit-4.20-19.6 is installed OR mozilla-nss-3.40.1-58.18 is installed OR mozilla-nss-32bit-3.40.1-58.18 is installed OR mozilla-nss-certs-3.40.1-58.18 is installed OR mozilla-nss-certs-32bit-3.40.1-58.18 is installed OR mozilla-nss-sysinit-3.40.1-58.18 is installed OR mozilla-nss-sysinit-32bit-3.40.1-58.18 is installed OR mozilla-nss-tools-3.40.1-58.18 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND python-cryptography-2.0.3-3.3 is installed Definition Synopsis SUSE OpenStack Cloud 9 is installed AND python-urllib3-1.23-3.6 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 9 is installed AND python-Django1-1.11.23-3.9 is installed
BACK