Oval Definition:	oval:org.opensuse.security:def:6114
Revision Date: 2022-08-26 Version: 1 Title: Security update for MozillaFirefox (Important) (in QA) Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.13.0 ESR (bsc#1202645): - CVE-2022-38472: Fixed a potential address bar spoofing via XSLT error handling. - CVE-2022-38473: Fixed an issue where cross-origin XSLT documents could inherit the parent's permissions. - CVE-2022-38478: Fixed various memory safety issues. This patch is currently in QA and not yet available for download. Family: unix Class: patch Status: Reference(s): 1188037 1202645 CVE-2008-3825 CVE-2008-4989 CVE-2009-1384 CVE-2009-4492 CVE-2010-0541 CVE-2010-1205 CVE-2010-2252 CVE-2010-2935 CVE-2010-2936 CVE-2011-0421 CVE-2011-1004 CVE-2011-1005 CVE-2011-1761 CVE-2011-2501 CVE-2011-2690 CVE-2011-2691 CVE-2011-2692 CVE-2011-3026 CVE-2011-3048 CVE-2011-3328 CVE-2011-3464 CVE-2011-4128 CVE-2011-4815 CVE-2012-0390 CVE-2012-1162 CVE-2012-1163 CVE-2012-1569 CVE-2012-1573 CVE-2012-3386 CVE-2012-4929 CVE-2013-4233 CVE-2013-4234 CVE-2014-0011 CVE-2014-0092 CVE-2014-0247 CVE-2014-0467 CVE-2014-1959 CVE-2014-3466 CVE-2014-3524 CVE-2014-3575 CVE-2014-3693 CVE-2014-4877 CVE-2014-5461 CVE-2014-8146 CVE-2014-8147 CVE-2014-8240 CVE-2014-8564 CVE-2014-9093 CVE-2014-9116 CVE-2015-0255 CVE-2015-0294 CVE-2015-2059 CVE-2015-2331 CVE-2015-3622 CVE-2015-4551 CVE-2015-5212 CVE-2015-5213 CVE-2015-5214 CVE-2015-6251 CVE-2015-7542 CVE-2015-8126 CVE-2015-8540 CVE-2016-10087 CVE-2016-10163 CVE-2016-10214 CVE-2016-4971 CVE-2016-5384 CVE-2016-7098 CVE-2016-7444 CVE-2016-8610 CVE-2017-0381 CVE-2017-10790 CVE-2017-5335 CVE-2017-5336 CVE-2017-5337 CVE-2017-5580 CVE-2017-5937 CVE-2017-5956 CVE-2017-5957 CVE-2017-5993 CVE-2017-5994 CVE-2017-6209 CVE-2017-6210 CVE-2017-6317 CVE-2017-6355 CVE-2017-6386 CVE-2017-6508 CVE-2018-10844 CVE-2018-10845 CVE-2018-10846 CVE-2021-21705 CVE-2022-38472 CVE-2022-38473 CVE-2022-38478 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE 13.2 NonFree SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability 12 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for High Performance Computing 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND Package Information dnsmasq-2.71-4.1 is installed OR dnsmasq-utils-2.71-4.1 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND kernel-zfcpdump-3.12.32-33 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND kernel-zfcpdump-3.12.51-60.20 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.21-84 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND kernel-zfcpdump-4.4.82-6.3 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information libreoffice-6.0.5.2-43.38 is installed OR libreoffice-sdk-6.0.5.2-43.38 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information bind-libs-9.9.4P2-0.6.1 is installed OR bind-libs-32bit-9.9.4P2-0.6.1 is installed OR bind-utils-9.9.4P2-0.6.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information tigervnc-1.3.0-22 is installed OR xorg-x11-Xvnc-1.3.0-22 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND libmodplug1-0.8.8.4-13 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND libvirglrenderer0-0.5.0-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information fontconfig-2.11.1-7 is installed OR fontconfig-32bit-2.11.1-7 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information xen-4.4.4_04-22.22 is installed OR xen-doc-html-4.4.4_04-22.22 is installed OR xen-kmp-default-4.4.4_04_k3.12.60_52.54-22.22 is installed OR xen-libs-4.4.4_04-22.22 is installed OR xen-libs-32bit-4.4.4_04-22.22 is installed OR xen-tools-4.4.4_04-22.22 is installed OR xen-tools-domU-4.4.4_04-22.22 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND clamav-0.99.2-32.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND fence-agents-4.0.25+git.1485179354.eb43835-2 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND ctdb-4.6.16+git.124.aee309c5c18-3.32 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP5 is installed AND haproxy-1.6.11-10 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-38.13 is installed OR aaa_base-extras-13.2+git20140911.61c1681-38.13 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-3_12_38-44-default-1-2 is installed OR kgraft-patch-3_12_38-44-xen-1-2 is installed OR kgraft-patch-SLE12_Update_3-1-2 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP3 is installed AND Package Information kgraft-patch-4_4_82-6_3-default-1-2 is installed OR kgraft-patch-SLE12-SP3_Update_1-1-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND Package Information salt-2016.11.4-46.10 is installed OR salt-api-2016.11.4-46.10 is installed OR salt-bash-completion-2016.11.4-46.10 is installed OR salt-cloud-2016.11.4-46.10 is installed OR salt-doc-2016.11.4-46.10 is installed OR salt-master-2016.11.4-46.10 is installed OR salt-minion-2016.11.4-46.10 is installed OR salt-proxy-2016.11.4-46.10 is installed OR salt-ssh-2016.11.4-46.10 is installed OR salt-syndic-2016.11.4-46.10 is installed OR salt-zsh-completion-2016.11.4-46.10 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND Package Information ruby2.1-rubygem-passenger-5.0.18-6 is installed OR rubygem-passenger-5.0.18-6 is installed OR rubygem-passenger-apache2-5.0.18-6 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 12 is installed AND Package Information libpmi0-17.02.9-6.10 is installed OR libslurm29-16.05.8.1-6 is installed OR libslurm31-17.02.9-6.10 is installed OR pdsh-2.33-7.5 is installed OR perl-slurm-17.02.9-6.10 is installed OR slurm-17.02.9-6.10 is installed OR slurm-auth-none-17.02.9-6.10 is installed OR slurm-devel-17.02.9-6.10 is installed OR slurm-doc-17.02.9-6.10 is installed OR slurm-lua-17.02.9-6.10 is installed OR slurm-munge-17.02.9-6.10 is installed OR slurm-pam_slurm-17.02.9-6.10 is installed OR slurm-plugins-17.02.9-6.10 is installed OR slurm-sched-wiki-17.02.9-6.10 is installed OR slurm-slurmdb-direct-17.02.9-6.10 is installed OR slurm-slurmdbd-17.02.9-6.10 is installed OR slurm-sql-17.02.9-6.10 is installed OR slurm-torque-17.02.9-6.10 is installed OR slurmlibs-16.05.8.1-6 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information compat-openssl098-0.9.8j-66 is installed OR libopenssl0_9_8-0.9.8j-66 is installed OR libopenssl0_9_8-32bit-0.9.8j-66 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1 is installed AND Package Information bind-9.5.0P2-20.7.1 is installed OR bind-chrootenv-9.5.0P2-20.7.1 is installed OR bind-doc-9.5.0P2-20.7.1 is installed OR bind-libs-9.5.0P2-20.7.1 is installed OR bind-libs-32bit-9.5.0P2-20.7.1 is installed OR bind-libs-x86-9.5.0P2-20.7.1 is installed OR bind-utils-9.5.0P2-20.7.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND LibVNCServer-0.9.1-154.24 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND libgcrypt11-1.5.0-0.17.1 is installed OR libgcrypt11-32bit-1.5.0-0.17.1 is installed OR libgcrypt11-x86-1.5.0-0.17.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND libgcrypt11-1.5.0-0.17.1 is installed OR libgcrypt11-32bit-1.5.0-0.17.1 is installed OR libgcrypt11-x86-1.5.0-0.17.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND clamav-0.97.7-0.3.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information ImageMagick-6.4.3.6-7.37.1 is installed OR libMagickCore1-6.4.3.6-7.37.1 is installed OR libMagickCore1-32bit-6.4.3.6-7.37.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND apache2-mod_security2-2.7.1-0.2.18.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information libcurl4-openssl1-7.19.7-0.40.1 is installed OR libcurl4-openssl1-32bit-7.19.7-0.40.1 is installed OR libcurl4-openssl1-x86-7.19.7-0.40.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information coreutils-8.22-5 is installed OR coreutils-lang-8.22-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information gnome-shell-3.10.4-40 is installed OR gnome-shell-browser-plugin-3.10.4-40 is installed OR gnome-shell-lang-3.10.4-40 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information accountsservice-0.6.42-14 is installed OR accountsservice-lang-0.6.42-14 is installed OR libaccountsservice0-0.6.42-14 is installed OR typelib-1_0-AccountsService-1_0-0.6.42-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed AND MozillaFirefox-91.13.0-112.127.4 is installed OR MozillaFirefox-devel-91.13.0-112.127.4 is installed OR MozillaFirefox-translations-common-91.13.0-112.127.4 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND MozillaFirefox-91.13.0-112.127.4 is installed OR MozillaFirefox-devel-91.13.0-112.127.4 is installed OR MozillaFirefox-translations-common-91.13.0-112.127.4 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND libgssglue1-0.4-3 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND Package Information kgraft-patch-4_4_90-92_45-default-6-2 is installed OR kgraft-patch-SLE12-SP2_Update_14-6-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND cups-devel-1.3.9-8.46.48.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information MozillaFirefox-38.5.0esr-28.2 is installed OR MozillaFirefox-devel-38.5.0esr-28.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND coolkey-devel-1.1.0-22.24 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND cups-devel-1.7.5-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information DirectFB-devel-1.7.1-4 is installed OR lib++dfb-devel-1.7.1-4 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND libHX-devel-3.18-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND LibVNCServer-devel-0.9.9-16 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information evince-3.20.1-6.14.1 is installed OR typelib-1_0-EvinceDocument-3_0-3.20.1-6.14.1 is installed OR typelib-1_0-EvinceView-3_0-3.20.1-6.14.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND gd-32bit-2.1.0-24.9 is installed
BACK