Oval Definition:	oval:org.opensuse.security:def:64111
Revision Date: 2020-12-01 Version: 1 Title: Security update for MozillaFirefox (Important) Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.5.0 ESR (bsc#1178824) * CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code * CVE-2020-16012: Variable time processing of cross-origin images during drawImage calls * CVE-2020-26953: Fullscreen could be enabled without displaying the security UI * CVE-2020-26956: XSS through paste (manual and clipboard API) * CVE-2020-26958: Requests intercepted through ServiceWorkers lacked MIME type restrictions * CVE-2020-26959: Use-after-free in WebRequestService * CVE-2020-26960: Potential use-after-free in uses of nsTArray * CVE-2020-15999: Heap buffer overflow in freetype * CVE-2020-26961: DoH did not filter IPv4 mapped IP Addresses * CVE-2020-26965: Software keyboards may have remembered typed passwords * CVE-2020-26966: Single-word search queries were also broadcast to local network * CVE-2020-26968: Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5 Family: unix Class: patch Status: Reference(s): 1061305 1120629 1120630 1120631 1127155 1131823 1137977 1138172 1138173 1155643 1173519 1173521 1174538 1178434 1178824 CVE-2017-14988 CVE-2018-16476 CVE-2018-20532 CVE-2018-20533 CVE-2018-20534 CVE-2019-11039 CVE-2019-11040 CVE-2019-13720 CVE-2019-13721 CVE-2020-11022 CVE-2020-11023 CVE-2020-15396 CVE-2020-15397 CVE-2020-15652 CVE-2020-15659 CVE-2020-15999 CVE-2020-16012 CVE-2020-26951 CVE-2020-26953 CVE-2020-26956 CVE-2020-26958 CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26965 CVE-2020-26966 CVE-2020-26968 CVE-2020-6463 CVE-2020-6514 openSUSE-SU-2019:1778-1 openSUSE-SU-2019:1954-1 openSUSE-SU-2019:2421-1 openSUSE-SU-2020:1179-1 openSUSE-SU-2020:1209-1 openSUSE-SU-2020:1888-1 SUSE-SU-2020:2660-1 Platform(s): openSUSE Leap 15.1 openSUSE Leap 15.2 SUSE Linux Enterprise High Availability 15 SP1 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS Product(s): Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information apache2-mod_php7-7.2.5-lp151.6.6 is installed OR php7-7.2.5-lp151.6.6 is installed OR php7-bcmath-7.2.5-lp151.6.6 is installed OR php7-bz2-7.2.5-lp151.6.6 is installed OR php7-calendar-7.2.5-lp151.6.6 is installed OR php7-ctype-7.2.5-lp151.6.6 is installed OR php7-curl-7.2.5-lp151.6.6 is installed OR php7-dba-7.2.5-lp151.6.6 is installed OR php7-devel-7.2.5-lp151.6.6 is installed OR php7-dom-7.2.5-lp151.6.6 is installed OR php7-embed-7.2.5-lp151.6.6 is installed OR php7-enchant-7.2.5-lp151.6.6 is installed OR php7-exif-7.2.5-lp151.6.6 is installed OR php7-fastcgi-7.2.5-lp151.6.6 is installed OR php7-fileinfo-7.2.5-lp151.6.6 is installed OR php7-firebird-7.2.5-lp151.6.6 is installed OR php7-fpm-7.2.5-lp151.6.6 is installed OR php7-ftp-7.2.5-lp151.6.6 is installed OR php7-gd-7.2.5-lp151.6.6 is installed OR php7-gettext-7.2.5-lp151.6.6 is installed OR php7-gmp-7.2.5-lp151.6.6 is installed OR php7-iconv-7.2.5-lp151.6.6 is installed OR php7-intl-7.2.5-lp151.6.6 is installed OR php7-json-7.2.5-lp151.6.6 is installed OR php7-ldap-7.2.5-lp151.6.6 is installed OR php7-mbstring-7.2.5-lp151.6.6 is installed OR php7-mysql-7.2.5-lp151.6.6 is installed OR php7-odbc-7.2.5-lp151.6.6 is installed OR php7-opcache-7.2.5-lp151.6.6 is installed OR php7-openssl-7.2.5-lp151.6.6 is installed OR php7-pcntl-7.2.5-lp151.6.6 is installed OR php7-pdo-7.2.5-lp151.6.6 is installed OR php7-pear-7.2.5-lp151.6.6 is installed OR php7-pear-Archive_Tar-7.2.5-lp151.6.6 is installed OR php7-pgsql-7.2.5-lp151.6.6 is installed OR php7-phar-7.2.5-lp151.6.6 is installed OR php7-posix-7.2.5-lp151.6.6 is installed OR php7-readline-7.2.5-lp151.6.6 is installed OR php7-shmop-7.2.5-lp151.6.6 is installed OR php7-snmp-7.2.5-lp151.6.6 is installed OR php7-soap-7.2.5-lp151.6.6 is installed OR php7-sockets-7.2.5-lp151.6.6 is installed OR php7-sodium-7.2.5-lp151.6.6 is installed OR php7-sqlite-7.2.5-lp151.6.6 is installed OR php7-sysvmsg-7.2.5-lp151.6.6 is installed OR php7-sysvsem-7.2.5-lp151.6.6 is installed OR php7-sysvshm-7.2.5-lp151.6.6 is installed OR php7-testresults-7.2.5-lp151.6.6 is installed OR php7-tidy-7.2.5-lp151.6.6 is installed OR php7-tokenizer-7.2.5-lp151.6.6 is installed OR php7-wddx-7.2.5-lp151.6.6 is installed OR php7-xmlreader-7.2.5-lp151.6.6 is installed OR php7-xmlrpc-7.2.5-lp151.6.6 is installed OR php7-xmlwriter-7.2.5-lp151.6.6 is installed OR php7-xsl-7.2.5-lp151.6.6 is installed OR php7-zip-7.2.5-lp151.6.6 is installed OR php7-zlib-7.2.5-lp151.6.6 is installed Definition Synopsis openSUSE Leap 15.2 is installed AND Package Information hylafax+-7.0.3-lp152.3.6 is installed OR hylafax+-client-7.0.3-lp152.3.6 is installed OR libfaxutil7_0_3-7.0.3-lp152.3.6 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 SP1 is installed AND ruby2.5-rubygem-activejob-5_1-5.1.4-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4-ESPOS is installed AND Package Information MozillaFirefox-78.5.0-112.36 is installed OR MozillaFirefox-devel-78.5.0-112.36 is installed OR MozillaFirefox-translations-common-78.5.0-112.36 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4-LTSS is installed AND Package Information libsolv-0.6.36-2.30 is installed OR libsolv-devel-0.6.36-2.30 is installed OR libsolv-tools-0.6.36-2.30 is installed OR perl-solv-0.6.36-2.30 is installed OR python-solv-0.6.36-2.30 is installed
BACK