Oval Definition:	oval:org.opensuse.security:def:58307
Revision Date: 2020-12-01 Version: 1 Title: Security update for MozillaFirefox (Moderate) Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.1.0 ESR * Fixed: Various stability, functionality, and security fixes (bsc#1174538) * CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker * CVE-2020-6514: WebRTC data channel leaks internal address to peer * CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy * CVE-2020-15653: Bypassing iframe sandbox when allowing popups * CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture * CVE-2020-15656: Type confusion for special arguments in IonMonkey * CVE-2020-15658: Overriding file type when saving to disk * CVE-2020-15657: DLL hijacking due to incorrect loading path * CVE-2020-15654: Custom cursor can overlay user interface * CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1 Family: unix Class: patch Status: Reference(s): 1015941 1020905 1086690 1094150 1094154 1094161 1096745 1111331 1122319 1125401 1128525 1133719 1135902 1138301 1138303 1139959 1140122 1140402 1143794 1152107 1160968 1162202 1168874 1173798 1173948 1174205 1174538 1174757 1175691 1176069 929629 CVE-2014-8146 CVE-2014-8147 CVE-2016-2183 CVE-2016-5546 CVE-2016-5547 CVE-2016-5548 CVE-2016-5549 CVE-2016-5552 CVE-2016-9957 CVE-2016-9958 CVE-2016-9959 CVE-2016-9960 CVE-2016-9961 CVE-2017-18269 CVE-2017-3231 CVE-2017-3241 CVE-2017-3252 CVE-2017-3253 CVE-2017-3259 CVE-2017-3260 CVE-2017-3261 CVE-2017-3272 CVE-2017-3289 CVE-2018-11236 CVE-2018-11237 CVE-2018-12020 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-10161 CVE-2019-10167 CVE-2019-11091 CVE-2019-12155 CVE-2019-13012 CVE-2019-13164 CVE-2019-14378 CVE-2019-16746 CVE-2019-18634 CVE-2019-6116 CVE-2019-8936 CVE-2020-14314 CVE-2020-14331 CVE-2020-14386 CVE-2020-15652 CVE-2020-15653 CVE-2020-15654 CVE-2020-15655 CVE-2020-15656 CVE-2020-15657 CVE-2020-15658 CVE-2020-15659 CVE-2020-16166 CVE-2020-2583 CVE-2020-2590 CVE-2020-2593 CVE-2020-2601 CVE-2020-2604 CVE-2020-2654 CVE-2020-2659 CVE-2020-6463 CVE-2020-6514 CVE-2020-6821 CVE-2020-6822 CVE-2020-6825 CVE-2020-6827 CVE-2020-6828 SUSE-SU-2016:3250-1 SUSE-SU-2017:0490-1 SUSE-SU-2017:2318-1 SUSE-SU-2018:1562-1 SUSE-SU-2019:0144-1 SUSE-SU-2019:0789-1 SUSE-SU-2019:1235-1 SUSE-SU-2020:0261-1 SUSE-SU-2020:0407-1 SUSE-SU-2020:0978-1 SUSE-SU-2020:2100-1 SUSE-SU-2020:2576-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information gnome-photos-3.26.3-lp150.2 is installed OR gnome-photos-lang-3.26.3-lp150.2 is installed OR gnome-shell-search-provider-gnome-photos-3.26.3-lp150.2 is installed OR gtk2-data-2.24.32-lp150.2 is installed OR gtk2-immodule-amharic-2.24.32-lp150.2 is installed OR gtk2-immodule-inuktitut-2.24.32-lp150.2 is installed OR gtk2-immodule-thai-2.24.32-lp150.2 is installed OR gtk2-immodule-vietnamese-2.24.32-lp150.2 is installed OR gtk2-immodule-xim-2.24.32-lp150.2 is installed OR gtk2-lang-2.24.32-lp150.2 is installed OR gtk2-tools-2.24.32-lp150.2 is installed OR libgtk-2_0-0-2.24.32-lp150.2 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information libvirt-5.1.0-lp151.7.3 is installed OR libvirt-admin-5.1.0-lp151.7.3 is installed OR libvirt-bash-completion-5.1.0-lp151.7.3 is installed OR libvirt-client-5.1.0-lp151.7.3 is installed OR libvirt-daemon-5.1.0-lp151.7.3 is installed OR libvirt-daemon-config-network-5.1.0-lp151.7.3 is installed OR libvirt-daemon-config-nwfilter-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-interface-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-libxl-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-lxc-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-network-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-nodedev-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-nwfilter-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-qemu-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-secret-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-core-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-disk-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-gluster-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-iscsi-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-logical-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-mpath-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-rbd-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-scsi-5.1.0-lp151.7.3 is installed OR libvirt-daemon-hooks-5.1.0-lp151.7.3 is installed OR libvirt-daemon-lxc-5.1.0-lp151.7.3 is installed OR libvirt-daemon-qemu-5.1.0-lp151.7.3 is installed OR libvirt-daemon-xen-5.1.0-lp151.7.3 is installed OR libvirt-devel-5.1.0-lp151.7.3 is installed OR libvirt-devel-32bit-5.1.0-lp151.7.3 is installed OR libvirt-doc-5.1.0-lp151.7.3 is installed OR libvirt-libs-5.1.0-lp151.7.3 is installed OR libvirt-lock-sanlock-5.1.0-lp151.7.3 is installed OR libvirt-nss-5.1.0-lp151.7.3 is installed OR wireshark-plugin-libvirt-5.1.0-lp151.7.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information libgme-0.6.0-5 is installed OR libgme0-0.6.0-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information ghostscript-9.26a-23.19 is installed OR ghostscript-x11-9.26a-23.19 is installed OR libspectre-0.2.7-12.6 is installed OR libspectre1-0.2.7-12.6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information gpg2-2.0.24-9.3 is installed OR gpg2-lang-2.0.24-9.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information glibc-2.22-62.13 is installed OR glibc-32bit-2.22-62.13 is installed OR glibc-devel-2.22-62.13 is installed OR glibc-devel-32bit-2.22-62.13 is installed OR glibc-html-2.22-62.13 is installed OR glibc-i18ndata-2.22-62.13 is installed OR glibc-info-2.22-62.13 is installed OR glibc-locale-2.22-62.13 is installed OR glibc-locale-32bit-2.22-62.13 is installed OR glibc-profile-2.22-62.13 is installed OR glibc-profile-32bit-2.22-62.13 is installed OR nscd-2.22-62.13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND busybox-1.21.1-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information gvim-7.4.326-17.6 is installed OR vim-7.4.326-17.6 is installed OR vim-data-7.4.326-17.6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information java-1_8_0-ibm-1.8.0_sr5.40-30.54 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information libvirt-3.3.0-5.40 is installed OR libvirt-admin-3.3.0-5.40 is installed OR libvirt-client-3.3.0-5.40 is installed OR libvirt-daemon-3.3.0-5.40 is installed OR libvirt-daemon-config-network-3.3.0-5.40 is installed OR libvirt-daemon-config-nwfilter-3.3.0-5.40 is installed OR libvirt-daemon-driver-interface-3.3.0-5.40 is installed OR libvirt-daemon-driver-libxl-3.3.0-5.40 is installed OR libvirt-daemon-driver-lxc-3.3.0-5.40 is installed OR libvirt-daemon-driver-network-3.3.0-5.40 is installed OR libvirt-daemon-driver-nodedev-3.3.0-5.40 is installed OR libvirt-daemon-driver-nwfilter-3.3.0-5.40 is installed OR libvirt-daemon-driver-qemu-3.3.0-5.40 is installed OR libvirt-daemon-driver-secret-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-core-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-disk-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-iscsi-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-logical-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-mpath-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-rbd-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-scsi-3.3.0-5.40 is installed OR libvirt-daemon-hooks-3.3.0-5.40 is installed OR libvirt-daemon-lxc-3.3.0-5.40 is installed OR libvirt-daemon-qemu-3.3.0-5.40 is installed OR libvirt-daemon-xen-3.3.0-5.40 is installed OR libvirt-doc-3.3.0-5.40 is installed OR libvirt-libs-3.3.0-5.40 is installed OR libvirt-lock-sanlock-3.3.0-5.40 is installed OR libvirt-nss-3.3.0-5.40 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND shadow-4.2.1-27.12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information liblouis-data-2.6.4-6.6 is installed OR liblouis9-2.6.4-6.6 is installed OR python-louis-2.6.4-6.6 is installed OR python3-louis-2.6.4-6.6 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information MozillaFirefox-78.1.0-112.8 is installed OR MozillaFirefox-devel-78.1.0-112.8 is installed OR MozillaFirefox-translations-common-78.1.0-112.8 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information icu-52.1-8.10 is installed OR libicu-doc-52.1-8.10 is installed OR libicu52_1-52.1-8.10 is installed OR libicu52_1-32bit-52.1-8.10 is installed OR libicu52_1-data-52.1-8.10 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information libecpg6-10.9-1.12 is installed OR libpq5-10.9-1.12 is installed OR libpq5-32bit-10.9-1.12 is installed OR postgresql10-10.9-1.12 is installed OR postgresql10-contrib-10.9-1.12 is installed OR postgresql10-docs-10.9-1.12 is installed OR postgresql10-libs-10.9-1.12 is installed OR postgresql10-plperl-10.9-1.12 is installed OR postgresql10-plpython-10.9-1.12 is installed OR postgresql10-pltcl-10.9-1.12 is installed OR postgresql10-server-10.9-1.12 is installed
BACK