Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2019-7317 (GCVE-0-2019-7317)
Vulnerability from cvelistv5 – Published: 2019-02-04 07:00 – Updated: 2026-05-28 18:24
VLAI
EPSS
VEX
Summary
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-05-28 18:24 UTC
CWE
- n/a
- CWE-416 - Use After Free
Assigner
References
42 references
Date Public
2019-02-04 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T20:46:45.928Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20190417 [slackware-security] libpng (SSA:2019-107-01)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "https://seclists.org/bugtraq/2019/Apr/30"
},
{
"name": "DSA-4435",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2019/dsa-4435"
},
{
"name": "20190429 [SECURITY] [DSA 4435-1] libpng1.6 security update",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "https://seclists.org/bugtraq/2019/Apr/36"
},
{
"name": "USN-3962-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/3962-1/"
},
{
"name": "USN-3991-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/3991-1/"
},
{
"name": "20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "https://seclists.org/bugtraq/2019/May/56"
},
{
"name": "20190523 [SECURITY] [DSA 4448-1] firefox-esr security update",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "https://seclists.org/bugtraq/2019/May/59"
},
{
"name": "DSA-4448",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2019/dsa-4448"
},
{
"name": "[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html"
},
{
"name": "RHSA-2019:1265",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
},
{
"name": "RHSA-2019:1267",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
},
{
"name": "RHSA-2019:1269",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
},
{
"name": "DSA-4451",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2019/dsa-4451"
},
{
"name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "https://seclists.org/bugtraq/2019/May/67"
},
{
"name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
},
{
"name": "USN-3997-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/3997-1/"
},
{
"name": "openSUSE-SU-2019:1484",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
},
{
"name": "RHSA-2019:1310",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
},
{
"name": "RHSA-2019:1308",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"name": "RHSA-2019:1309",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
},
{
"name": "openSUSE-SU-2019:1534",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
},
{
"name": "openSUSE-SU-2019:1664",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
},
{
"name": "108098",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/108098"
},
{
"name": "USN-4080-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4080-1/"
},
{
"name": "USN-4083-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4083-1/"
},
{
"name": "GLSA-201908-02",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201908-02"
},
{
"name": "RHSA-2019:2494",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
},
{
"name": "RHSA-2019:2495",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
},
{
"name": "openSUSE-SU-2019:1916",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html"
},
{
"name": "openSUSE-SU-2019:1912",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html"
},
{
"name": "RHSA-2019:2585",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
},
{
"name": "RHSA-2019:2590",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2590"
},
{
"name": "RHSA-2019:2592",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
},
{
"name": "RHSA-2019:2737",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/glennrp/libpng/issues/275"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20190719-0005/"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2019-7317",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-28T18:24:04.122794Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416 Use After Free",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-28T18:24:45.126Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2019-02-04T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-10-20T10:38:36.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20190417 [slackware-security] libpng (SSA:2019-107-01)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "https://seclists.org/bugtraq/2019/Apr/30"
},
{
"name": "DSA-4435",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2019/dsa-4435"
},
{
"name": "20190429 [SECURITY] [DSA 4435-1] libpng1.6 security update",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "https://seclists.org/bugtraq/2019/Apr/36"
},
{
"name": "USN-3962-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/3962-1/"
},
{
"name": "USN-3991-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/3991-1/"
},
{
"name": "20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "https://seclists.org/bugtraq/2019/May/56"
},
{
"name": "20190523 [SECURITY] [DSA 4448-1] firefox-esr security update",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "https://seclists.org/bugtraq/2019/May/59"
},
{
"name": "DSA-4448",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2019/dsa-4448"
},
{
"name": "[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html"
},
{
"name": "RHSA-2019:1265",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
},
{
"name": "RHSA-2019:1267",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
},
{
"name": "RHSA-2019:1269",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
},
{
"name": "DSA-4451",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2019/dsa-4451"
},
{
"name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "https://seclists.org/bugtraq/2019/May/67"
},
{
"name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
},
{
"name": "USN-3997-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/3997-1/"
},
{
"name": "openSUSE-SU-2019:1484",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
},
{
"name": "RHSA-2019:1310",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
},
{
"name": "RHSA-2019:1308",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"name": "RHSA-2019:1309",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
},
{
"name": "openSUSE-SU-2019:1534",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
},
{
"name": "openSUSE-SU-2019:1664",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
},
{
"name": "108098",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/108098"
},
{
"name": "USN-4080-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4080-1/"
},
{
"name": "USN-4083-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4083-1/"
},
{
"name": "GLSA-201908-02",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201908-02"
},
{
"name": "RHSA-2019:2494",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
},
{
"name": "RHSA-2019:2495",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
},
{
"name": "openSUSE-SU-2019:1916",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html"
},
{
"name": "openSUSE-SU-2019:1912",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html"
},
{
"name": "RHSA-2019:2585",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
},
{
"name": "RHSA-2019:2590",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2590"
},
{
"name": "RHSA-2019:2592",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
},
{
"name": "RHSA-2019:2737",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/glennrp/libpng/issues/275"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://security.netapp.com/advisory/ntap-20190719-0005/"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-7317",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20190417 [slackware-security] libpng (SSA:2019-107-01)",
"refsource": "BUGTRAQ",
"url": "https://seclists.org/bugtraq/2019/Apr/30"
},
{
"name": "DSA-4435",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2019/dsa-4435"
},
{
"name": "20190429 [SECURITY] [DSA 4435-1] libpng1.6 security update",
"refsource": "BUGTRAQ",
"url": "https://seclists.org/bugtraq/2019/Apr/36"
},
{
"name": "USN-3962-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3962-1/"
},
{
"name": "USN-3991-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3991-1/"
},
{
"name": "20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)",
"refsource": "BUGTRAQ",
"url": "https://seclists.org/bugtraq/2019/May/56"
},
{
"name": "20190523 [SECURITY] [DSA 4448-1] firefox-esr security update",
"refsource": "BUGTRAQ",
"url": "https://seclists.org/bugtraq/2019/May/59"
},
{
"name": "DSA-4448",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2019/dsa-4448"
},
{
"name": "[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html"
},
{
"name": "RHSA-2019:1265",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
},
{
"name": "RHSA-2019:1267",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
},
{
"name": "RHSA-2019:1269",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
},
{
"name": "DSA-4451",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2019/dsa-4451"
},
{
"name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
"refsource": "BUGTRAQ",
"url": "https://seclists.org/bugtraq/2019/May/67"
},
{
"name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
},
{
"name": "USN-3997-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3997-1/"
},
{
"name": "openSUSE-SU-2019:1484",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
},
{
"name": "RHSA-2019:1310",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
},
{
"name": "RHSA-2019:1308",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"name": "RHSA-2019:1309",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
},
{
"name": "openSUSE-SU-2019:1534",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
},
{
"name": "openSUSE-SU-2019:1664",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
},
{
"name": "108098",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/108098"
},
{
"name": "USN-4080-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4080-1/"
},
{
"name": "USN-4083-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4083-1/"
},
{
"name": "GLSA-201908-02",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201908-02"
},
{
"name": "RHSA-2019:2494",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
},
{
"name": "RHSA-2019:2495",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
},
{
"name": "openSUSE-SU-2019:1916",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html"
},
{
"name": "openSUSE-SU-2019:1912",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html"
},
{
"name": "RHSA-2019:2585",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
},
{
"name": "RHSA-2019:2590",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2590"
},
{
"name": "RHSA-2019:2592",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
},
{
"name": "RHSA-2019:2737",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
},
{
"name": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"refsource": "MISC",
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"name": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803",
"refsource": "MISC",
"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803"
},
{
"name": "https://github.com/glennrp/libpng/issues/275",
"refsource": "MISC",
"url": "https://github.com/glennrp/libpng/issues/275"
},
{
"name": "http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html"
},
{
"name": "https://security.netapp.com/advisory/ntap-20190719-0005/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20190719-0005/"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us",
"refsource": "CONFIRM",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us"
},
{
"name": "https://www.oracle.com/security-alerts/cpuoct2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2019-7317",
"datePublished": "2019-02-04T07:00:00.000Z",
"dateReserved": "2019-02-04T00:00:00.000Z",
"dateUpdated": "2026-05-28T18:24:45.126Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2019-7317",
"date": "2026-08-12",
"epss": "0.09393",
"percentile": "0.94948"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"1.6.0\", \"versionEndExcluding\": \"1.6.37\", \"matchCriteriaId\": \"078AA00A-515F-493E-A53E-FE1937FA8018\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"712507AC-DAB8-4FFE-9426-08282919411F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*\", \"matchCriteriaId\": \"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"07C312A0-CD2C-4B9C-B064-6409B25C278F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CD783B0C-9246-47D9-A937-6144FE8BFF0F\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.2.6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9C21D62F-F3DD-4E9E-B644-07CCC49F3D53\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:java_se:7u221:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3999BDC1-BA77-4DBE-8041-D993BA9FF04D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:java_se:8u212:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C2B2677D-6B48-45A2-8567-AB6DB9FF1B45\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:jdk:11.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EAF3DD5E-1A96-4285-84BA-EB5E31EF2516\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:jdk:12.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"32318CC6-B8C4-4429-BB8B-134DC202A27E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"8.0.23\", \"matchCriteriaId\": \"0185E85D-2C64-4D77-BC1D-A20165D5078E\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*\", \"versionEndExcluding\": \"8.7.0-00\", \"matchCriteriaId\": \"6B07BDE2-FE50-4C0E-9C73-6AA6C1D6C060\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:hpe:xp7_command_view_advanced_edition_suite:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"8.7.0-00\", \"matchCriteriaId\": \"BE33C1F1-DED8-424C-8942-E1A48A9EBA05\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"97D4FFCF-5309-43B6-9FD5-680C6D535A7F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FF583CDC-DE9E-45AB-9861-CB203BFA8862\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F1E78106-58E6-4D59-990F-75DA575BFAD9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B620311B-34A3-48A6-82DF-6F078D7A4493\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:opensuse:package_hub:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7B8B0B75-0DF2-4B5C-BC81-2F8E172AEE4E\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CBC8B78D-1131-4F21-919D-8AC79A410FB9\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*\", \"versionEndExcluding\": \"9.6\", \"matchCriteriaId\": \"60429DC5-C403-41D1-9DDF-30782D012DF6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*\", \"versionEndExcluding\": \"9.6\", \"matchCriteriaId\": \"95571D2E-5C83-484C-A44F-AC36972C67D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:active_iq_unified_manager:9.6:*:*:*:*:vmware_vsphere:*:*\", \"matchCriteriaId\": \"3AF659DD-C4AE-4DDC-B50B-327A717EFC74\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:active_iq_unified_manager:9.6:*:*:*:*:windows:*:*\", \"matchCriteriaId\": \"40E21C6E-AEDF-43E8-AA80-629C77D24DF7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5C2089EE-5D7F-47EC-8EA5-0F69790564C4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:e-series_santricity_management:-:*:*:*:*:vcenter:*:*\", \"matchCriteriaId\": \"BADA4949-F766-4092-A6BC-1B85B5FB60FF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:e-series_santricity_storage_manager:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"11.53\", \"matchCriteriaId\": \"1FC01AF8-4A4B-4FC4-B07F-1193FEFF5A47\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:e-series_santricity_unified_manager:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.2\", \"matchCriteriaId\": \"8557ED41-5B30-47C8-A556-6C1F6E8E227B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:e-series_santricity_web_services:*:*:*:*:*:web_services_proxy:*:*\", \"versionEndExcluding\": \"4.0\", \"matchCriteriaId\": \"C7E42333-853D-4938-90EB-2A6653476357\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:oncommand_insight:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"7.3.9\", \"matchCriteriaId\": \"82DC1F62-0DA2-4BB8-9AFE-4BC4366205F5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:oncommand_workflow_automation:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"5.1\", \"matchCriteriaId\": \"2798786F-A818-4C52-BC20-0A69DB49D16A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FFE0A9D2-9A49-4BF6-BC6F-8249162D8334\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:snapmanager:*:*:*:*:*:oracle:*:*\", \"versionEndExcluding\": \"3.4.2\", \"matchCriteriaId\": \"41436638-0B88-4823-8208-81C01F2CA6A6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:snapmanager:*:*:*:*:*:sap:*:*\", \"versionEndExcluding\": \"3.4.2\", \"matchCriteriaId\": \"910F5303-1F70-44E3-A951-567447BC46FF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:snapmanager:3.4.2:p1:*:*:*:oracle:*:*\", \"matchCriteriaId\": \"1925AC26-45D4-46D5-ACDD-91E5A90977B6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:snapmanager:3.4.2:p1:*:*:*:sap:*:*\", \"matchCriteriaId\": \"9DC6435A-8369-4D18-A6EE-84E73D6AA84D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:steelstore:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0DF5449D-22D2-48B4-8F50-57B43DCB15B9\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4F86C3C-B99C-44C6-97D7-163DC3F59687\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4CFF558-3C47-480D-A2F0-BABF26042943\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"33C068A4-3780-4EAB-A937-6082DF847564\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D5291B60-AB52-4830-8E1A-8048A471902C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"566507B6-AC95-47F7-A3FB-C6F414E45F51\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"87C21FE1-EA5C-498F-9C6C-D05F91A88217\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"25C8B513-76C1-4184-A253-CB32F04A05BE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1CDCFF34-6F1D-45A1-BE37-6A0E17B04801\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B4A684C7-88FD-43C4-9BDB-AE337FCBD0AB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"47811209-5CE5-4375-8391-B0A7F6A0E420\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"634C23AC-AC9C-43F4-BED8-1C720816D5E3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"37CE1DC7-72C5-483C-8921-0B462C8284D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.\"}, {\"lang\": \"es\", \"value\": \"La funci\\u00f3n png_image_free en el archivo png.c en libpng versiones 1.6.x anteriores a 1.6.37, presenta un uso de la memoria previamente liberada porque la funci\\u00f3n png_image_free_function es llamada bajo png_safe_execute.\"}]",
"id": "CVE-2019-7317",
"lastModified": "2024-11-21T04:48:00.033",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H\", \"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.6, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:H/Au:N/C:N/I:N/A:P\", \"baseScore\": 2.6, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"HIGH\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"LOW\", \"exploitabilityScore\": 4.9, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
"published": "2019-02-04T08:29:00.447",
"references": "[{\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securityfocus.com/bid/108098\", \"source\": \"cve@mitre.org\", \"tags\": [\"Not Applicable\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1265\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1267\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1269\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1308\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1309\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1310\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2494\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2495\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2585\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2590\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2592\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2737\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/glennrp/libpng/issues/275\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/Apr/30\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/Apr/36\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/56\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/59\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/67\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201908-02\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20190719-0005/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3962-1/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3991-1/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3997-1/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/4080-1/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/4083-1/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4435\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4448\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4451\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuApr2021.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuoct2021.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securityfocus.com/bid/108098\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Not Applicable\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1265\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1267\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1269\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1308\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1309\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1310\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2494\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2495\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2585\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2590\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2592\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2737\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/glennrp/libpng/issues/275\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/Apr/30\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/Apr/36\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/56\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/59\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/67\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201908-02\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20190719-0005/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3962-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3991-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3997-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/4080-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/4083-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4435\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4448\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4451\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuApr2021.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuoct2021.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-416\"}]}]"
},
"microsoft_vex": {
"current_release_date": "2025-03-14T00:00:00.000Z",
"cve": "CVE-2019-7317",
"id": "msrc_CVE-2019-7317",
"initial_release_date": "2019-02-02T00:00:00.000Z",
"product_status:fixed": "2",
"product_status:known_affected": "2",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"url": "https://msrc.microsoft.com/csaf/vex/2019/msrc_cve-2019-7317.json",
"version": "1"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2019-7317\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2019-02-04T08:29:00.447\",\"lastModified\":\"2026-05-28T19:16:35.503\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.\"},{\"lang\":\"es\",\"value\":\"La funci\u00f3n png_image_free en el archivo png.c en libpng versiones 1.6.x anteriores a 1.6.37, presenta un uso de la memoria previamente liberada porque la funci\u00f3n png_image_free_function es llamada bajo png_safe_execute.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.6,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.6,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:H/Au:N/C:N/I:N/A:P\",\"baseScore\":2.6,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"HIGH\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":4.9,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.6.0\",\"versionEndExcluding\":\"1.6.37\",\"matchCriteriaId\":\"078AA00A-515F-493E-A53E-FE1937FA8018\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"712507AC-DAB8-4FFE-9426-08282919411F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07C312A0-CD2C-4B9C-B064-6409B25C278F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD783B0C-9246-47D9-A937-6144FE8BFF0F\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.2.6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C21D62F-F3DD-4E9E-B644-07CCC49F3D53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:java_se:7u221:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3999BDC1-BA77-4DBE-8041-D993BA9FF04D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:java_se:8u212:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2B2677D-6B48-45A2-8567-AB6DB9FF1B45\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:11.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EAF3DD5E-1A96-4285-84BA-EB5E31EF2516\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:12.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"32318CC6-B8C4-4429-BB8B-134DC202A27E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"8.0.23\",\"matchCriteriaId\":\"0185E85D-2C64-4D77-BC1D-A20165D5078E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*\",\"versionEndExcluding\":\"8.7.0-00\",\"matchCriteriaId\":\"6B07BDE2-FE50-4C0E-9C73-6AA6C1D6C060\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hpe:xp7_command_view_advanced_edition_suite:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"8.7.0-00\",\"matchCriteriaId\":\"BE33C1F1-DED8-424C-8942-E1A48A9EBA05\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97D4FFCF-5309-43B6-9FD5-680C6D535A7F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF583CDC-DE9E-45AB-9861-CB203BFA8862\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1E78106-58E6-4D59-990F-75DA575BFAD9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B620311B-34A3-48A6-82DF-6F078D7A4493\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:opensuse:package_hub:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B8B0B75-0DF2-4B5C-BC81-2F8E172AEE4E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CBC8B78D-1131-4F21-919D-8AC79A410FB9\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*\",\"versionEndExcluding\":\"9.6\",\"matchCriteriaId\":\"60429DC5-C403-41D1-9DDF-30782D012DF6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*\",\"versionEndExcluding\":\"9.6\",\"matchCriteriaId\":\"95571D2E-5C83-484C-A44F-AC36972C67D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:active_iq_unified_manager:9.6:*:*:*:*:vmware_vsphere:*:*\",\"matchCriteriaId\":\"3AF659DD-C4AE-4DDC-B50B-327A717EFC74\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:active_iq_unified_manager:9.6:*:*:*:*:windows:*:*\",\"matchCriteriaId\":\"40E21C6E-AEDF-43E8-AA80-629C77D24DF7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C2089EE-5D7F-47EC-8EA5-0F69790564C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_management:-:*:*:*:*:vcenter:*:*\",\"matchCriteriaId\":\"BADA4949-F766-4092-A6BC-1B85B5FB60FF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_storage_manager:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"11.53\",\"matchCriteriaId\":\"1FC01AF8-4A4B-4FC4-B07F-1193FEFF5A47\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_unified_manager:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.2\",\"matchCriteriaId\":\"8557ED41-5B30-47C8-A556-6C1F6E8E227B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_web_services:*:*:*:*:*:web_services_proxy:*:*\",\"versionEndExcluding\":\"4.0\",\"matchCriteriaId\":\"C7E42333-853D-4938-90EB-2A6653476357\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_insight:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"7.3.9\",\"matchCriteriaId\":\"82DC1F62-0DA2-4BB8-9AFE-4BC4366205F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_workflow_automation:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.1\",\"matchCriteriaId\":\"2798786F-A818-4C52-BC20-0A69DB49D16A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FFE0A9D2-9A49-4BF6-BC6F-8249162D8334\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapmanager:*:*:*:*:*:oracle:*:*\",\"versionEndExcluding\":\"3.4.2\",\"matchCriteriaId\":\"41436638-0B88-4823-8208-81C01F2CA6A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapmanager:*:*:*:*:*:sap:*:*\",\"versionEndExcluding\":\"3.4.2\",\"matchCriteriaId\":\"910F5303-1F70-44E3-A951-567447BC46FF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapmanager:3.4.2:p1:*:*:*:oracle:*:*\",\"matchCriteriaId\":\"1925AC26-45D4-46D5-ACDD-91E5A90977B6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapmanager:3.4.2:p1:*:*:*:sap:*:*\",\"matchCriteriaId\":\"9DC6435A-8369-4D18-A6EE-84E73D6AA84D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:steelstore:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0DF5449D-22D2-48B4-8F50-57B43DCB15B9\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4F86C3C-B99C-44C6-97D7-163DC3F59687\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4CFF558-3C47-480D-A2F0-BABF26042943\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5291B60-AB52-4830-8E1A-8048A471902C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"566507B6-AC95-47F7-A3FB-C6F414E45F51\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"87C21FE1-EA5C-498F-9C6C-D05F91A88217\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"25C8B513-76C1-4184-A253-CB32F04A05BE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1CDCFF34-6F1D-45A1-BE37-6A0E17B04801\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4A684C7-88FD-43C4-9BDB-AE337FCBD0AB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"47811209-5CE5-4375-8391-B0A7F6A0E420\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"634C23AC-AC9C-43F4-BED8-1C720816D5E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"37CE1DC7-72C5-483C-8921-0B462C8284D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/108098\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1265\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1267\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1269\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1308\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1309\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1310\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2494\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2495\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2585\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2590\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2592\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2737\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/glennrp/libpng/issues/275\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/Apr/30\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/Apr/36\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/May/56\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/May/59\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/May/67\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201908-02\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20190719-0005/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3962-1/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3991-1/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3997-1/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4080-1/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4083-1/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4435\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4448\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4451\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuApr2021.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2021.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/108098\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1265\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1267\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1269\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1308\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1309\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1310\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2494\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2495\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2585\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2590\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2592\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2737\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/glennrp/libpng/issues/275\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/Apr/30\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/Apr/36\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/May/56\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/May/59\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/May/67\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201908-02\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20190719-0005/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3962-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3991-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3997-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4080-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4083-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4435\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4448\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4451\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuApr2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]}]}}",
"redhat_vex": {
"aggregate_severity": "Low",
"current_release_date": "2026-06-28T11:58:00+00:00",
"cve": "CVE-2019-7317",
"id": "CVE-2019-7317",
"initial_release_date": "2019-01-25T00:00:00+00:00",
"product_status:fixed": "314",
"product_status:known_affected": "8",
"product_status:known_not_affected": "14",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "libpng: use-after-free in png_image_free in png.c",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-7317.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "moderate",
"current_release_date": "2026-07-17T14:11:26Z",
"cve": "CVE-2019-7317",
"id": "CVE-2019-7317",
"initial_release_date": "2023-02-15T04:16:02Z",
"product_status:known_affected": "320",
"product_status:known_not_affected": "6",
"product_status:recommended": "1866",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2019-7317",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2019-7317.json",
"version": "52"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://seclists.org/bugtraq/2019/Apr/30\", \"name\": \"20190417 [slackware-security] libpng (SSA:2019-107-01)\", \"tags\": [\"mailing-list\", \"x_refsource_BUGTRAQ\", \"x_transferred\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4435\", \"name\": \"DSA-4435\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\", \"x_transferred\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/Apr/36\", \"name\": \"20190429 [SECURITY] [DSA 4435-1] libpng1.6 security update\", \"tags\": [\"mailing-list\", \"x_refsource_BUGTRAQ\", \"x_transferred\"]}, {\"url\": \"https://usn.ubuntu.com/3962-1/\", \"name\": \"USN-3962-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"]}, {\"url\": \"https://usn.ubuntu.com/3991-1/\", \"name\": \"USN-3991-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/56\", \"name\": \"20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)\", \"tags\": [\"mailing-list\", \"x_refsource_BUGTRAQ\", \"x_transferred\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/59\", \"name\": \"20190523 [SECURITY] [DSA 4448-1] firefox-esr security update\", \"tags\": [\"mailing-list\", \"x_refsource_BUGTRAQ\", \"x_transferred\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4448\", \"name\": \"DSA-4448\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html\", \"name\": \"[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1265\", \"name\": \"RHSA-2019:1265\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1267\", \"name\": \"RHSA-2019:1267\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1269\", \"name\": \"RHSA-2019:1269\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4451\", \"name\": \"DSA-4451\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\", \"x_transferred\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/67\", \"name\": \"20190527 [SECURITY] [DSA 4451-1] thunderbird security update\", \"tags\": [\"mailing-list\", \"x_refsource_BUGTRAQ\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html\", \"name\": \"[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://usn.ubuntu.com/3997-1/\", \"name\": \"USN-3997-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html\", \"name\": \"openSUSE-SU-2019:1484\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1310\", \"name\": \"RHSA-2019:1310\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1308\", \"name\": \"RHSA-2019:1308\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1309\", \"name\": \"RHSA-2019:1309\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html\", \"name\": \"openSUSE-SU-2019:1534\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html\", \"name\": \"openSUSE-SU-2019:1664\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"]}, {\"url\": \"http://www.securityfocus.com/bid/108098\", \"name\": \"108098\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"]}, {\"url\": \"https://usn.ubuntu.com/4080-1/\", \"name\": \"USN-4080-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"]}, {\"url\": \"https://usn.ubuntu.com/4083-1/\", \"name\": \"USN-4083-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/201908-02\", \"name\": \"GLSA-201908-02\", \"tags\": [\"vendor-advisory\", \"x_refsource_GENTOO\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2494\", \"name\": \"RHSA-2019:2494\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2495\", \"name\": \"RHSA-2019:2495\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\", \"name\": \"openSUSE-SU-2019:1916\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\", \"name\": \"openSUSE-SU-2019:1912\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2585\", \"name\": \"RHSA-2019:2585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2590\", \"name\": \"RHSA-2019:2590\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2592\", \"name\": \"RHSA-2019:2592\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2737\", \"name\": \"RHSA-2019:2737\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuApr2021.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://github.com/glennrp/libpng/issues/275\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20190719-0005/\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuoct2021.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-04T20:46:45.928Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2019-7317\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-05-28T18:24:04.122794Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-416\", \"description\": \"CWE-416 Use After Free\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-05-28T18:24:38.239Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"n/a\", \"product\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"datePublic\": \"2019-02-04T00:00:00.000Z\", \"references\": [{\"url\": \"https://seclists.org/bugtraq/2019/Apr/30\", \"name\": \"20190417 [slackware-security] libpng (SSA:2019-107-01)\", \"tags\": [\"mailing-list\", \"x_refsource_BUGTRAQ\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4435\", \"name\": \"DSA-4435\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/Apr/36\", \"name\": \"20190429 [SECURITY] [DSA 4435-1] libpng1.6 security update\", \"tags\": [\"mailing-list\", \"x_refsource_BUGTRAQ\"]}, {\"url\": \"https://usn.ubuntu.com/3962-1/\", \"name\": \"USN-3962-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"]}, {\"url\": \"https://usn.ubuntu.com/3991-1/\", \"name\": \"USN-3991-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/56\", \"name\": \"20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)\", \"tags\": [\"mailing-list\", \"x_refsource_BUGTRAQ\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/59\", \"name\": \"20190523 [SECURITY] [DSA 4448-1] firefox-esr security update\", \"tags\": [\"mailing-list\", \"x_refsource_BUGTRAQ\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4448\", \"name\": \"DSA-4448\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html\", \"name\": \"[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1265\", \"name\": \"RHSA-2019:1265\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1267\", \"name\": \"RHSA-2019:1267\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1269\", \"name\": \"RHSA-2019:1269\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4451\", \"name\": \"DSA-4451\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/67\", \"name\": \"20190527 [SECURITY] [DSA 4451-1] thunderbird security update\", \"tags\": [\"mailing-list\", \"x_refsource_BUGTRAQ\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html\", \"name\": \"[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://usn.ubuntu.com/3997-1/\", \"name\": \"USN-3997-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html\", \"name\": \"openSUSE-SU-2019:1484\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1310\", \"name\": \"RHSA-2019:1310\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1308\", \"name\": \"RHSA-2019:1308\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1309\", \"name\": \"RHSA-2019:1309\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html\", \"name\": \"openSUSE-SU-2019:1534\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html\", \"name\": \"openSUSE-SU-2019:1664\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"]}, {\"url\": \"http://www.securityfocus.com/bid/108098\", \"name\": \"108098\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\"]}, {\"url\": \"https://usn.ubuntu.com/4080-1/\", \"name\": \"USN-4080-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"]}, {\"url\": \"https://usn.ubuntu.com/4083-1/\", \"name\": \"USN-4083-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"]}, {\"url\": \"https://security.gentoo.org/glsa/201908-02\", \"name\": \"GLSA-201908-02\", \"tags\": [\"vendor-advisory\", \"x_refsource_GENTOO\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2494\", \"name\": \"RHSA-2019:2494\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2495\", \"name\": \"RHSA-2019:2495\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\", \"name\": \"openSUSE-SU-2019:1916\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\", \"name\": \"openSUSE-SU-2019:1912\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2585\", \"name\": \"RHSA-2019:2585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2590\", \"name\": \"RHSA-2019:2590\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2592\", \"name\": \"RHSA-2019:2592\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2737\", \"name\": \"RHSA-2019:2737\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuApr2021.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/glennrp/libpng/issues/275\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20190719-0005/\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuoct2021.html\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"n/a\"}]}], \"providerMetadata\": {\"orgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"shortName\": \"mitre\", \"dateUpdated\": \"2021-10-20T10:38:36.000Z\"}, \"x_legacyV4Record\": {\"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"version\": {\"version_data\": [{\"version_value\": \"n/a\"}]}, \"product_name\": \"n/a\"}]}, \"vendor_name\": \"n/a\"}]}}, \"data_type\": \"CVE\", \"references\": {\"reference_data\": [{\"url\": \"https://seclists.org/bugtraq/2019/Apr/30\", \"name\": \"20190417 [slackware-security] libpng (SSA:2019-107-01)\", \"refsource\": \"BUGTRAQ\"}, {\"url\": \"https://www.debian.org/security/2019/dsa-4435\", \"name\": \"DSA-4435\", \"refsource\": \"DEBIAN\"}, {\"url\": \"https://seclists.org/bugtraq/2019/Apr/36\", \"name\": \"20190429 [SECURITY] [DSA 4435-1] libpng1.6 security update\", \"refsource\": \"BUGTRAQ\"}, {\"url\": \"https://usn.ubuntu.com/3962-1/\", \"name\": \"USN-3962-1\", \"refsource\": \"UBUNTU\"}, {\"url\": \"https://usn.ubuntu.com/3991-1/\", \"name\": \"USN-3991-1\", \"refsource\": \"UBUNTU\"}, {\"url\": \"https://seclists.org/bugtraq/2019/May/56\", \"name\": \"20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)\", \"refsource\": \"BUGTRAQ\"}, {\"url\": \"https://seclists.org/bugtraq/2019/May/59\", \"name\": \"20190523 [SECURITY] [DSA 4448-1] firefox-esr security update\", \"refsource\": \"BUGTRAQ\"}, {\"url\": \"https://www.debian.org/security/2019/dsa-4448\", \"name\": \"DSA-4448\", \"refsource\": \"DEBIAN\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html\", \"name\": \"[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update\", \"refsource\": \"MLIST\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1265\", \"name\": \"RHSA-2019:1265\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1267\", \"name\": \"RHSA-2019:1267\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1269\", \"name\": \"RHSA-2019:1269\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://www.debian.org/security/2019/dsa-4451\", \"name\": \"DSA-4451\", \"refsource\": \"DEBIAN\"}, {\"url\": \"https://seclists.org/bugtraq/2019/May/67\", \"name\": \"20190527 [SECURITY] [DSA 4451-1] thunderbird security update\", \"refsource\": \"BUGTRAQ\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html\", \"name\": \"[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update\", \"refsource\": \"MLIST\"}, {\"url\": \"https://usn.ubuntu.com/3997-1/\", \"name\": \"USN-3997-1\", \"refsource\": \"UBUNTU\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html\", \"name\": \"openSUSE-SU-2019:1484\", \"refsource\": \"SUSE\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1310\", \"name\": \"RHSA-2019:1310\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1308\", \"name\": \"RHSA-2019:1308\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1309\", \"name\": \"RHSA-2019:1309\", \"refsource\": \"REDHAT\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html\", \"name\": \"openSUSE-SU-2019:1534\", \"refsource\": \"SUSE\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html\", \"name\": \"openSUSE-SU-2019:1664\", \"refsource\": \"SUSE\"}, {\"url\": \"http://www.securityfocus.com/bid/108098\", \"name\": \"108098\", \"refsource\": \"BID\"}, {\"url\": \"https://usn.ubuntu.com/4080-1/\", \"name\": \"USN-4080-1\", \"refsource\": \"UBUNTU\"}, {\"url\": \"https://usn.ubuntu.com/4083-1/\", \"name\": \"USN-4083-1\", \"refsource\": \"UBUNTU\"}, {\"url\": \"https://security.gentoo.org/glsa/201908-02\", \"name\": \"GLSA-201908-02\", \"refsource\": \"GENTOO\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2494\", \"name\": \"RHSA-2019:2494\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2495\", \"name\": \"RHSA-2019:2495\", \"refsource\": \"REDHAT\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\", \"name\": \"openSUSE-SU-2019:1916\", \"refsource\": \"SUSE\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\", \"name\": \"openSUSE-SU-2019:1912\", \"refsource\": \"SUSE\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2585\", \"name\": \"RHSA-2019:2585\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2590\", \"name\": \"RHSA-2019:2590\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2592\", \"name\": \"RHSA-2019:2592\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2737\", \"name\": \"RHSA-2019:2737\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\", \"name\": \"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\", \"refsource\": \"MISC\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpuApr2021.html\", \"name\": \"https://www.oracle.com/security-alerts/cpuApr2021.html\", \"refsource\": \"MISC\"}, {\"url\": \"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803\", \"name\": \"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803\", \"refsource\": \"MISC\"}, {\"url\": \"https://github.com/glennrp/libpng/issues/275\", \"name\": \"https://github.com/glennrp/libpng/issues/275\", \"refsource\": \"MISC\"}, {\"url\": \"http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html\", \"name\": \"http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html\", \"refsource\": \"MISC\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20190719-0005/\", \"name\": \"https://security.netapp.com/advisory/ntap-20190719-0005/\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\", \"name\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpuoct2021.html\", \"name\": \"https://www.oracle.com/security-alerts/cpuoct2021.html\", \"refsource\": \"MISC\"}]}, \"data_format\": \"MITRE\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"n/a\"}]}]}, \"data_version\": \"4.0\", \"CVE_data_meta\": {\"ID\": \"CVE-2019-7317\", \"STATE\": \"PUBLIC\", \"ASSIGNER\": \"cve@mitre.org\"}}}}",
"cveMetadata": "{\"cveId\": \"CVE-2019-7317\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-28T18:24:45.126Z\", \"dateReserved\": \"2019-02-04T00:00:00.000Z\", \"assignerOrgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"datePublished\": \"2019-02-04T07:00:00.000Z\", \"assignerShortName\": \"mitre\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2019_2737
Vulnerability from csaf_redhat - Published: 2019-09-11 15:15 - Updated: 2024-11-15 08:26Summary
Red Hat Security Advisory: java-1.8.0-ibm security update
Severity
Important
Notes
Topic: An update for java-1.8.0-ibm is now available for Red Hat Satellite 5.8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 8 to version 8 SR5-FP40.
Security Fix(es):
* IBM JDK: Out-of-bounds access in the String.getBytes method (CVE-2019-11772)
* IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775)
* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)
* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)
* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)
* OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) (CVE-2019-2786)
* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
4.8 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Java code run under a SecurityManager.
9.8 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
38 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-ibm is now available for Red Hat Satellite 5.8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP40.\n\nSecurity Fix(es):\n\n* IBM JDK: Out-of-bounds access in the String.getBytes method (CVE-2019-11772)\n\n* IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775)\n\n* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)\n\n* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)\n\n* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)\n\n* OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) (CVE-2019-2786)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:2737",
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1730056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730056"
},
{
"category": "external",
"summary": "1730099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730099"
},
{
"category": "external",
"summary": "1730255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730255"
},
{
"category": "external",
"summary": "1730415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730415"
},
{
"category": "external",
"summary": "1738547",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738547"
},
{
"category": "external",
"summary": "1738549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738549"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2737.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-ibm security update",
"tracking": {
"current_release_date": "2024-11-15T08:26:28+00:00",
"generator": {
"date": "2024-11-15T08:26:28+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:2737",
"initial_release_date": "2019-09-11T15:15:17+00:00",
"revision_history": [
{
"date": "2019-09-11T15:15:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-09-11T15:15:17+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T08:26:28+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 5.8 (RHEL v.6)",
"product": {
"name": "Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_satellite:5.8::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.40-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.40-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.40-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.40-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Satellite58"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Satellite58"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Satellite58"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Satellite58"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-2762",
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730415"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "RHBZ#1730415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730415"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2762",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2762"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2762",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2762"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-11T15:15:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)"
},
{
"cve": "CVE-2019-2769",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730056"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "RHBZ#1730056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2769",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2769"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-11T15:15:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)"
},
{
"cve": "CVE-2019-2786",
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730255"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "RHBZ#1730255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730255"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2786",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2786"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2786",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2786"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-11T15:15:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)"
},
{
"cve": "CVE-2019-2816",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730099"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Missing URL format validation (Networking, 8221518)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "RHBZ#1730099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730099"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2816"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-11T15:15:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Missing URL format validation (Networking, 8221518)"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-11T15:15:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"cve": "CVE-2019-11772",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2019-08-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1738547"
}
],
"notes": [
{
"category": "description",
"text": "In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Java code run under a SecurityManager.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: Out-of-bounds access in the String.getBytes method",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11772"
},
{
"category": "external",
"summary": "RHBZ#1738547",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738547"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11772",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11772"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11772",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11772"
}
],
"release_date": "2019-08-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-11T15:15:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: Out-of-bounds access in the String.getBytes method"
},
{
"cve": "CVE-2019-11775",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2019-08-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1738549"
}
],
"notes": [
{
"category": "description",
"text": "All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: Failure to privatize a value pulled out of the loop by versioning",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11775"
},
{
"category": "external",
"summary": "RHBZ#1738549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738549"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11775",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11775"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11775",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11775"
}
],
"release_date": "2019-08-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-11T15:15:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: Failure to privatize a value pulled out of the loop by versioning"
}
]
}
SUSE-SU-2019:1388-1
Vulnerability from csaf_suse - Published: 2019-05-31 08:11 - Updated: 2019-05-31 08:11Summary
Security update for MozillaFirefox
Severity
Important
Notes
Title of the patch: Security update for MozillaFirefox
Description of the patch: This update for MozillaFirefox fixes the following issues:
Security issues fixed:
- CVE-2019-11691: Use-after-free in XMLHttpRequest
- CVE-2019-11692: Use-after-free removing listeners in the event listener manager
- CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
- CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox
- CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
- CVE-2019-7317: Use-after-free in png_image_free of libpng library
- CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
- CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
- CVE-2019-9816: Type confusion with object groups and UnboxedObjects
- CVE-2019-9817: Stealing of cross-domain images using canvas
- CVE-2019-9818: Use-after-free in crash generation server
- CVE-2019-9819: Compartment mismatch with fetch API
- CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell
Non-security issues fixed:
- Font and date adjustments to accommodate the new Reiwa era in Japan
- Update to Firefox ESR 60.7 (bsc#1135824)
Patchnames: SUSE-2019-1388,SUSE-OpenStack-Cloud-7-2019-1388,SUSE-SLE-DESKTOP-12-SP3-2019-1388,SUSE-SLE-DESKTOP-12-SP4-2019-1388,SUSE-SLE-SAP-12-SP1-2019-1388,SUSE-SLE-SAP-12-SP2-2019-1388,SUSE-SLE-SDK-12-SP3-2019-1388,SUSE-SLE-SDK-12-SP4-2019-1388,SUSE-SLE-SERVER-12-2019-1388,SUSE-SLE-SERVER-12-SP1-2019-1388,SUSE-SLE-SERVER-12-SP2-2019-1388,SUSE-SLE-SERVER-12-SP2-BCL-2019-1388,SUSE-SLE-SERVER-12-SP3-2019-1388,SUSE-SLE-SERVER-12-SP4-2019-1388,SUSE-Storage-4-2019-1388
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
48 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for MozillaFirefox",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for MozillaFirefox fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-11691: Use-after-free in XMLHttpRequest\n- CVE-2019-11692: Use-after-free removing listeners in the event listener manager\n- CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux\n- CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox\n- CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks\n- CVE-2019-7317: Use-after-free in png_image_free of libpng library\n- CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7\n- CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS\n- CVE-2019-9816: Type confusion with object groups and UnboxedObjects\n- CVE-2019-9817: Stealing of cross-domain images using canvas\n- CVE-2019-9818: Use-after-free in crash generation server\n- CVE-2019-9819: Compartment mismatch with fetch API\n- CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell\n\nNon-security issues fixed:\n\n- Font and date adjustments to accommodate the new Reiwa era in Japan\n- Update to Firefox ESR 60.7 (bsc#1135824)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-1388,SUSE-OpenStack-Cloud-7-2019-1388,SUSE-SLE-DESKTOP-12-SP3-2019-1388,SUSE-SLE-DESKTOP-12-SP4-2019-1388,SUSE-SLE-SAP-12-SP1-2019-1388,SUSE-SLE-SAP-12-SP2-2019-1388,SUSE-SLE-SDK-12-SP3-2019-1388,SUSE-SLE-SDK-12-SP4-2019-1388,SUSE-SLE-SERVER-12-2019-1388,SUSE-SLE-SERVER-12-SP1-2019-1388,SUSE-SLE-SERVER-12-SP2-2019-1388,SUSE-SLE-SERVER-12-SP2-BCL-2019-1388,SUSE-SLE-SERVER-12-SP3-2019-1388,SUSE-SLE-SERVER-12-SP4-2019-1388,SUSE-Storage-4-2019-1388",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_1388-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:1388-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191388-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:1388-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-May/005524.html"
},
{
"category": "self",
"summary": "SUSE Bug 1135824",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11691 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11692 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11692/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11693 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11694 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11698 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9800 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9815 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9817 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9819 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9820 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9820/"
}
],
"title": "Security update for MozillaFirefox",
"tracking": {
"current_release_date": "2019-05-31T08:11:53Z",
"generator": {
"date": "2019-05-31T08:11:53Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:1388-1",
"initial_release_date": "2019-05-31T08:11:53Z",
"revision_history": [
{
"date": "2019-05-31T08:11:53Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-109.72.1.aarch64",
"product": {
"name": "MozillaFirefox-60.7.0-109.72.1.aarch64",
"product_id": "MozillaFirefox-60.7.0-109.72.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.aarch64",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.aarch64",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"product": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"product_id": "MozillaFirefox-devel-60.7.0-109.72.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"product_id": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.aarch64",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.aarch64",
"product_id": "MozillaFirefox-translations-other-60.7.0-109.72.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-109.72.1.i686",
"product": {
"name": "MozillaFirefox-60.7.0-109.72.1.i686",
"product_id": "MozillaFirefox-60.7.0-109.72.1.i686"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.i686",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.i686",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.i686"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-109.72.1.i686",
"product": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.i686",
"product_id": "MozillaFirefox-devel-60.7.0-109.72.1.i686"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.i686",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.i686",
"product_id": "MozillaFirefox-translations-common-60.7.0-109.72.1.i686"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.i686",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.i686",
"product_id": "MozillaFirefox-translations-other-60.7.0-109.72.1.i686"
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"product": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"product_id": "MozillaFirefox-60.7.0-109.72.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.ppc64le",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.ppc64le",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"product": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"product_id": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"product_id": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.ppc64le",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.ppc64le",
"product_id": "MozillaFirefox-translations-other-60.7.0-109.72.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-109.72.1.s390x",
"product": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x",
"product_id": "MozillaFirefox-60.7.0-109.72.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.s390x",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.s390x",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"product": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"product_id": "MozillaFirefox-devel-60.7.0-109.72.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"product_id": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.s390x",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.s390x",
"product_id": "MozillaFirefox-translations-other-60.7.0-109.72.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"product": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"product_id": "MozillaFirefox-60.7.0-109.72.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.x86_64",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.x86_64",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"product": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"product_id": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"product_id": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.x86_64",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.x86_64",
"product_id": "MozillaFirefox-translations-other-60.7.0-109.72.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 7",
"product": {
"name": "SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP3",
"product_id": "SUSE Linux Enterprise Desktop 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 4",
"product": {
"name": "SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
"product_id": "SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
"product_id": "SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-11691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11691"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11691",
"url": "https://www.suse.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11691",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-11691"
},
{
"cve": "CVE-2019-11692",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11692"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11692",
"url": "https://www.suse.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11692",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-11692"
},
{
"cve": "CVE-2019-11693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11693"
}
],
"notes": [
{
"category": "general",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11693",
"url": "https://www.suse.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11693",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-11693"
},
{
"cve": "CVE-2019-11694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11694"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a call to access an otherwise unavailable file. This results in the potential leaking of information stored at that memory location. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11694",
"url": "https://www.suse.com/security/cve/CVE-2019-11694"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11694",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-11694"
},
{
"cve": "CVE-2019-11698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11698"
}
],
"notes": [
{
"category": "general",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11698",
"url": "https://www.suse.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11698",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-11698"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
},
{
"cve": "CVE-2019-9800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9800"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9800",
"url": "https://www.suse.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9800",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-9800"
},
{
"cve": "CVE-2019-9815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9815"
}
],
"notes": [
{
"category": "general",
"text": "If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main thread and any worker threads. *Note: users need to update to macOS 10.14.5 in order to take advantage of this change.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9815",
"url": "https://www.suse.com/security/cve/CVE-2019-9815"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9815",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-9815"
},
{
"cve": "CVE-2019-9816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9816"
}
],
"notes": [
{
"category": "general",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9816",
"url": "https://www.suse.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9816",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-9816"
},
{
"cve": "CVE-2019-9817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9817"
}
],
"notes": [
{
"category": "general",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9817",
"url": "https://www.suse.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9817",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-9817"
},
{
"cve": "CVE-2019-9818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9818"
}
],
"notes": [
{
"category": "general",
"text": "A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. *Note: this vulnerability only affects Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9818",
"url": "https://www.suse.com/security/cve/CVE-2019-9818"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9818",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-9818"
},
{
"cve": "CVE-2019-9819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9819"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9819",
"url": "https://www.suse.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9819",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-9819"
},
{
"cve": "CVE-2019-9820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9820"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9820",
"url": "https://www.suse.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9820",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-9820"
}
]
}
SUSE-SU-2019:1398-1
Vulnerability from csaf_suse - Published: 2019-05-31 10:54 - Updated: 2019-05-31 10:54Summary
Security update for libpng16
Severity
Low
Notes
Title of the patch: Security update for libpng16
Description of the patch: This update for libpng16 fixes the following issues:
Security issues fixed:
- CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when
png_image_free() was called under png_safe_execute (bsc#1124211).
- CVE-2018-13785: Fixed a wrong calculation of row_factor in the
png_check_chunk_length function in pngrutil.c, which could haved triggered
and integer overflow and result in an divide-by-zero while processing a
crafted PNG file, leading to a denial of service (bsc#1100687)
Patchnames: SUSE-2019-1398,SUSE-SLE-Module-Basesystem-15-2019-1398,SUSE-SLE-Module-Development-Tools-OBS-15-2019-1398
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-32bit-1.6.34-3.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-32bit-1.6.34-3.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
19 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libpng16",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libpng16 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when \n png_image_free() was called under png_safe_execute (bsc#1124211).\n- CVE-2018-13785: Fixed a wrong calculation of row_factor in the\n png_check_chunk_length function in pngrutil.c, which could haved triggered\n and integer overflow and result in an divide-by-zero while processing a\n crafted PNG file, leading to a denial of service (bsc#1100687)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-1398,SUSE-SLE-Module-Basesystem-15-2019-1398,SUSE-SLE-Module-Development-Tools-OBS-15-2019-1398",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_1398-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:1398-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191398-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:1398-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-May/005525.html"
},
{
"category": "self",
"summary": "SUSE Bug 1100687",
"url": "https://bugzilla.suse.com/1100687"
},
{
"category": "self",
"summary": "SUSE Bug 1121624",
"url": "https://bugzilla.suse.com/1121624"
},
{
"category": "self",
"summary": "SUSE Bug 1124211",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-13785 page",
"url": "https://www.suse.com/security/cve/CVE-2018-13785/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for libpng16",
"tracking": {
"current_release_date": "2019-05-31T10:54:25Z",
"generator": {
"date": "2019-05-31T10:54:25Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:1398-1",
"initial_release_date": "2019-05-31T10:54:25Z",
"revision_history": [
{
"date": "2019-05-31T10:54:25Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.aarch64",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.aarch64",
"product_id": "libpng16-16-1.6.34-3.9.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.aarch64",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.aarch64",
"product_id": "libpng16-devel-1.6.34-3.9.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.aarch64",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.aarch64",
"product_id": "libpng16-tools-1.6.34-3.9.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product": {
"name": "libpng16-16-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product_id": "libpng16-16-64bit-1.6.34-3.9.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product": {
"name": "libpng16-compat-devel-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product_id": "libpng16-compat-devel-64bit-1.6.34-3.9.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libpng16-devel-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product": {
"name": "libpng16-devel-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product_id": "libpng16-devel-64bit-1.6.34-3.9.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.i586",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.i586",
"product_id": "libpng16-16-1.6.34-3.9.1.i586"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.i586",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.i586",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.i586"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.i586",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.i586",
"product_id": "libpng16-devel-1.6.34-3.9.1.i586"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.i586",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.i586",
"product_id": "libpng16-tools-1.6.34-3.9.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.ppc64le",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.ppc64le",
"product_id": "libpng16-16-1.6.34-3.9.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.ppc64le",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.ppc64le",
"product_id": "libpng16-devel-1.6.34-3.9.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.ppc64le",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.ppc64le",
"product_id": "libpng16-tools-1.6.34-3.9.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.s390x",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.s390x",
"product_id": "libpng16-16-1.6.34-3.9.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.s390x",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.s390x",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.s390x",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.s390x",
"product_id": "libpng16-devel-1.6.34-3.9.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.s390x",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.s390x",
"product_id": "libpng16-tools-1.6.34-3.9.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-16-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-16-32bit-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-32bit-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-compat-devel-32bit-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-compat-devel-32bit-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-devel-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-32bit-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-devel-32bit-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-devel-32bit-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-tools-1.6.34-3.9.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.34-3.9.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.aarch64"
},
"product_reference": "libpng16-16-1.6.34-3.9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.34-3.9.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.ppc64le"
},
"product_reference": "libpng16-16-1.6.34-3.9.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.34-3.9.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.s390x"
},
"product_reference": "libpng16-16-1.6.34-3.9.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.34-3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.x86_64"
},
"product_reference": "libpng16-16-1.6.34-3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.34-3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-32bit-1.6.34-3.9.1.x86_64"
},
"product_reference": "libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.aarch64"
},
"product_reference": "libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.ppc64le"
},
"product_reference": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.s390x"
},
"product_reference": "libpng16-compat-devel-1.6.34-3.9.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.x86_64"
},
"product_reference": "libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.34-3.9.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.aarch64"
},
"product_reference": "libpng16-devel-1.6.34-3.9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.34-3.9.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.ppc64le"
},
"product_reference": "libpng16-devel-1.6.34-3.9.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.34-3.9.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.s390x"
},
"product_reference": "libpng16-devel-1.6.34-3.9.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.34-3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.x86_64"
},
"product_reference": "libpng16-devel-1.6.34-3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-13785",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-13785"
}
],
"notes": [
{
"category": "general",
"text": "In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-13785",
"url": "https://www.suse.com/security/cve/CVE-2018-13785"
},
{
"category": "external",
"summary": "SUSE Bug 1100687 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1100687"
},
{
"category": "external",
"summary": "SUSE Bug 1112153 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1112153"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T10:54:25Z",
"details": "low"
}
],
"title": "CVE-2018-13785"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T10:54:25Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
SUSE-SU-2019:1398-2
Vulnerability from csaf_suse - Published: 2019-07-05 11:03 - Updated: 2019-07-05 11:03Summary
Security update for libpng16
Severity
Low
Notes
Title of the patch: Security update for libpng16
Description of the patch: This update for libpng16 fixes the following issues:
Security issues fixed:
- CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when
png_image_free() was called under png_safe_execute (bsc#1124211).
- CVE-2018-13785: Fixed a wrong calculation of row_factor in the
png_check_chunk_length function in pngrutil.c, which could haved triggered
and integer overflow and result in an divide-by-zero while processing a
crafted PNG file, leading to a denial of service (bsc#1100687)
Patchnames: SUSE-2019-1398,SUSE-SLE-Module-Basesystem-15-SP1-2019-1398,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-1398
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-32bit-1.6.34-3.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-32bit-1.6.34-3.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
19 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libpng16",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libpng16 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when \n png_image_free() was called under png_safe_execute (bsc#1124211).\n- CVE-2018-13785: Fixed a wrong calculation of row_factor in the\n png_check_chunk_length function in pngrutil.c, which could haved triggered\n and integer overflow and result in an divide-by-zero while processing a\n crafted PNG file, leading to a denial of service (bsc#1100687)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-1398,SUSE-SLE-Module-Basesystem-15-SP1-2019-1398,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-1398",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_1398-2.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:1398-2",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191398-2/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:1398-2",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-July/005664.html"
},
{
"category": "self",
"summary": "SUSE Bug 1100687",
"url": "https://bugzilla.suse.com/1100687"
},
{
"category": "self",
"summary": "SUSE Bug 1121624",
"url": "https://bugzilla.suse.com/1121624"
},
{
"category": "self",
"summary": "SUSE Bug 1124211",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-13785 page",
"url": "https://www.suse.com/security/cve/CVE-2018-13785/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for libpng16",
"tracking": {
"current_release_date": "2019-07-05T11:03:58Z",
"generator": {
"date": "2019-07-05T11:03:58Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:1398-2",
"initial_release_date": "2019-07-05T11:03:58Z",
"revision_history": [
{
"date": "2019-07-05T11:03:58Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.aarch64",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.aarch64",
"product_id": "libpng16-16-1.6.34-3.9.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.aarch64",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.aarch64",
"product_id": "libpng16-devel-1.6.34-3.9.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.aarch64",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.aarch64",
"product_id": "libpng16-tools-1.6.34-3.9.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product": {
"name": "libpng16-16-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product_id": "libpng16-16-64bit-1.6.34-3.9.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product": {
"name": "libpng16-compat-devel-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product_id": "libpng16-compat-devel-64bit-1.6.34-3.9.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libpng16-devel-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product": {
"name": "libpng16-devel-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product_id": "libpng16-devel-64bit-1.6.34-3.9.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.i586",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.i586",
"product_id": "libpng16-16-1.6.34-3.9.1.i586"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.i586",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.i586",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.i586"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.i586",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.i586",
"product_id": "libpng16-devel-1.6.34-3.9.1.i586"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.i586",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.i586",
"product_id": "libpng16-tools-1.6.34-3.9.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.ppc64le",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.ppc64le",
"product_id": "libpng16-16-1.6.34-3.9.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.ppc64le",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.ppc64le",
"product_id": "libpng16-devel-1.6.34-3.9.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.ppc64le",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.ppc64le",
"product_id": "libpng16-tools-1.6.34-3.9.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.s390x",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.s390x",
"product_id": "libpng16-16-1.6.34-3.9.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.s390x",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.s390x",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.s390x",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.s390x",
"product_id": "libpng16-devel-1.6.34-3.9.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.s390x",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.s390x",
"product_id": "libpng16-tools-1.6.34-3.9.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-16-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-16-32bit-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-32bit-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-compat-devel-32bit-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-compat-devel-32bit-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-devel-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-32bit-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-devel-32bit-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-devel-32bit-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-tools-1.6.34-3.9.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.34-3.9.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.aarch64"
},
"product_reference": "libpng16-16-1.6.34-3.9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.34-3.9.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.ppc64le"
},
"product_reference": "libpng16-16-1.6.34-3.9.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.34-3.9.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.s390x"
},
"product_reference": "libpng16-16-1.6.34-3.9.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.34-3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.x86_64"
},
"product_reference": "libpng16-16-1.6.34-3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.34-3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-32bit-1.6.34-3.9.1.x86_64"
},
"product_reference": "libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.aarch64"
},
"product_reference": "libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.ppc64le"
},
"product_reference": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.s390x"
},
"product_reference": "libpng16-compat-devel-1.6.34-3.9.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.x86_64"
},
"product_reference": "libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.34-3.9.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.aarch64"
},
"product_reference": "libpng16-devel-1.6.34-3.9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.34-3.9.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.ppc64le"
},
"product_reference": "libpng16-devel-1.6.34-3.9.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.34-3.9.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.s390x"
},
"product_reference": "libpng16-devel-1.6.34-3.9.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.34-3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.x86_64"
},
"product_reference": "libpng16-devel-1.6.34-3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-13785",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-13785"
}
],
"notes": [
{
"category": "general",
"text": "In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-13785",
"url": "https://www.suse.com/security/cve/CVE-2018-13785"
},
{
"category": "external",
"summary": "SUSE Bug 1100687 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1100687"
},
{
"category": "external",
"summary": "SUSE Bug 1112153 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1112153"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-05T11:03:58Z",
"details": "low"
}
],
"title": "CVE-2018-13785"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-05T11:03:58Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
SUSE-SU-2019:1405-1
Vulnerability from csaf_suse - Published: 2019-06-03 11:30 - Updated: 2019-06-03 11:30Summary
Security update for MozillaFirefox
Severity
Important
Notes
Title of the patch: Security update for MozillaFirefox
Description of the patch: This update for MozillaFirefox fixes the following issues:
Security issues fixed:
- CVE-2019-11691: Use-after-free in XMLHttpRequest
- CVE-2019-11692: Use-after-free removing listeners in the event listener manager
- CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
- CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox
- CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
- CVE-2019-7317: Use-after-free in png_image_free of libpng library
- CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
- CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
- CVE-2019-9816: Type confusion with object groups and UnboxedObjects
- CVE-2019-9817: Stealing of cross-domain images using canvas
- CVE-2019-9818: Use-after-free in crash generation server
- CVE-2019-9819: Compartment mismatch with fetch API
- CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell
Non-security issues fixed:
- Font and date adjustments to accommodate the new Reiwa era in Japan
- Update to Firefox ESR 60.7 (bsc#1135824)
Patchnames: SUSE-2019-1405,SUSE-SLE-Module-Desktop-Applications-15-2019-1405,SUSE-SLE-Module-Desktop-Applications-15-SP1-2019-1405,SUSE-SLE-Module-Development-Tools-OBS-15-2019-1405,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-1405
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
48 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for MozillaFirefox",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for MozillaFirefox fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-11691: Use-after-free in XMLHttpRequest\n- CVE-2019-11692: Use-after-free removing listeners in the event listener manager\n- CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux\n- CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox\n- CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks\n- CVE-2019-7317: Use-after-free in png_image_free of libpng library\n- CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7\n- CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS\n- CVE-2019-9816: Type confusion with object groups and UnboxedObjects\n- CVE-2019-9817: Stealing of cross-domain images using canvas\n- CVE-2019-9818: Use-after-free in crash generation server\n- CVE-2019-9819: Compartment mismatch with fetch API\n- CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell\n\nNon-security issues fixed:\n\n- Font and date adjustments to accommodate the new Reiwa era in Japan\n- Update to Firefox ESR 60.7 (bsc#1135824)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-1405,SUSE-SLE-Module-Desktop-Applications-15-2019-1405,SUSE-SLE-Module-Desktop-Applications-15-SP1-2019-1405,SUSE-SLE-Module-Development-Tools-OBS-15-2019-1405,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-1405",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_1405-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:1405-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191405-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:1405-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-June/005527.html"
},
{
"category": "self",
"summary": "SUSE Bug 1135824",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11691 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11692 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11692/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11693 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11694 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11698 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9800 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9815 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9817 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9819 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9820 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9820/"
}
],
"title": "Security update for MozillaFirefox",
"tracking": {
"current_release_date": "2019-06-03T11:30:37Z",
"generator": {
"date": "2019-06-03T11:30:37Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:1405-1",
"initial_release_date": "2019-06-03T11:30:37Z",
"revision_history": [
{
"date": "2019-06-03T11:30:37Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-3.40.6.aarch64",
"product": {
"name": "MozillaFirefox-60.7.0-3.40.6.aarch64",
"product_id": "MozillaFirefox-60.7.0-3.40.6.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.aarch64",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.aarch64",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"product": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"product_id": "MozillaFirefox-devel-60.7.0-3.40.6.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"product_id": "MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"product_id": "MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-3.40.6.ppc64le",
"product": {
"name": "MozillaFirefox-60.7.0-3.40.6.ppc64le",
"product_id": "MozillaFirefox-60.7.0-3.40.6.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.ppc64le",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.ppc64le",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"product": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"product_id": "MozillaFirefox-devel-60.7.0-3.40.6.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"product_id": "MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"product_id": "MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-3.40.6.s390x",
"product": {
"name": "MozillaFirefox-60.7.0-3.40.6.s390x",
"product_id": "MozillaFirefox-60.7.0-3.40.6.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.s390x",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.s390x",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"product": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"product_id": "MozillaFirefox-devel-60.7.0-3.40.6.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"product_id": "MozillaFirefox-translations-common-60.7.0-3.40.6.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"product_id": "MozillaFirefox-translations-other-60.7.0-3.40.6.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-3.40.6.x86_64",
"product": {
"name": "MozillaFirefox-60.7.0-3.40.6.x86_64",
"product_id": "MozillaFirefox-60.7.0-3.40.6.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.x86_64",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.x86_64",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-buildsymbols-60.7.0-3.40.6.x86_64",
"product": {
"name": "MozillaFirefox-buildsymbols-60.7.0-3.40.6.x86_64",
"product_id": "MozillaFirefox-buildsymbols-60.7.0-3.40.6.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"product": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"product_id": "MozillaFirefox-devel-60.7.0-3.40.6.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"product_id": "MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"product_id": "MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Desktop Applications 15",
"product": {
"name": "SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-desktop-applications:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-desktop-applications:15:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-3.40.6.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64"
},
"product_reference": "MozillaFirefox-60.7.0-3.40.6.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-3.40.6.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-3.40.6.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-3.40.6.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-3.40.6.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-3.40.6.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-3.40.6.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le"
},
"product_reference": "MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x"
},
"product_reference": "MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64"
},
"product_reference": "MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le"
},
"product_reference": "MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x"
},
"product_reference": "MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
},
"product_reference": "MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-3.40.6.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64"
},
"product_reference": "MozillaFirefox-60.7.0-3.40.6.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-3.40.6.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-3.40.6.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-3.40.6.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-3.40.6.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-3.40.6.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-3.40.6.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le"
},
"product_reference": "MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64"
},
"product_reference": "MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le"
},
"product_reference": "MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x"
},
"product_reference": "MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
},
"product_reference": "MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-11691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11691"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11691",
"url": "https://www.suse.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11691",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-11691"
},
{
"cve": "CVE-2019-11692",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11692"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11692",
"url": "https://www.suse.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11692",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-11692"
},
{
"cve": "CVE-2019-11693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11693"
}
],
"notes": [
{
"category": "general",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11693",
"url": "https://www.suse.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11693",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-11693"
},
{
"cve": "CVE-2019-11694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11694"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a call to access an otherwise unavailable file. This results in the potential leaking of information stored at that memory location. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11694",
"url": "https://www.suse.com/security/cve/CVE-2019-11694"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11694",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-11694"
},
{
"cve": "CVE-2019-11698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11698"
}
],
"notes": [
{
"category": "general",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11698",
"url": "https://www.suse.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11698",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-11698"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
},
{
"cve": "CVE-2019-9800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9800"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9800",
"url": "https://www.suse.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9800",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-9800"
},
{
"cve": "CVE-2019-9815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9815"
}
],
"notes": [
{
"category": "general",
"text": "If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main thread and any worker threads. *Note: users need to update to macOS 10.14.5 in order to take advantage of this change.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9815",
"url": "https://www.suse.com/security/cve/CVE-2019-9815"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9815",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-9815"
},
{
"cve": "CVE-2019-9816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9816"
}
],
"notes": [
{
"category": "general",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9816",
"url": "https://www.suse.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9816",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-9816"
},
{
"cve": "CVE-2019-9817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9817"
}
],
"notes": [
{
"category": "general",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9817",
"url": "https://www.suse.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9817",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-9817"
},
{
"cve": "CVE-2019-9818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9818"
}
],
"notes": [
{
"category": "general",
"text": "A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. *Note: this vulnerability only affects Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9818",
"url": "https://www.suse.com/security/cve/CVE-2019-9818"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9818",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-9818"
},
{
"cve": "CVE-2019-9819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9819"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9819",
"url": "https://www.suse.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9819",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-9819"
},
{
"cve": "CVE-2019-9820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9820"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9820",
"url": "https://www.suse.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9820",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-9820"
}
]
}
SUSE-SU-2019:14160-1
Vulnerability from csaf_suse - Published: 2019-09-04 08:05 - Updated: 2019-09-04 08:05Summary
Security update for java-1_7_1-ibm
Severity
Important
Notes
Title of the patch: Security update for java-1_7_1-ibm
Description of the patch: This update for java-1_7_1-ibm fixes the following issues:
Update to Java 7.1 Service Refresh 4 Fix Pack 50.
Security issues fixed:
- CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).
- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).
- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).
- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).
- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).
Patchnames: slessp4-java-1_7_1-ibm-14160
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.8 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
42 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_1-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_7_1-ibm fixes the following issues:\n\nUpdate to Java 7.1 Service Refresh 4 Fix Pack 50.\n\nSecurity issues fixed:\n\n- CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).\n- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).\n- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).\n- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).\n- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "slessp4-java-1_7_1-ibm-14160",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_14160-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:14160-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-201914160-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:14160-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-September/005877.html"
},
{
"category": "self",
"summary": "SUSE Bug 1141780",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "self",
"summary": "SUSE Bug 1141782",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "self",
"summary": "SUSE Bug 1141783",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "self",
"summary": "SUSE Bug 1141785",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "self",
"summary": "SUSE Bug 1141789",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "self",
"summary": "SUSE Bug 1147021",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11771 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11771/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11775 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-4473 page",
"url": "https://www.suse.com/security/cve/CVE-2019-4473/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for java-1_7_1-ibm",
"tracking": {
"current_release_date": "2019-09-04T08:05:57Z",
"generator": {
"date": "2019-09-04T08:05:57Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:14160-1",
"initial_release_date": "2019-09-04T08:05:57Z",
"revision_history": [
{
"date": "2019-09-04T08:05:57Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"product": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"product_id": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"product": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"product_id": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64"
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"product_id": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64",
"product_id": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-11771",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11771"
}
],
"notes": [
{
"category": "general",
"text": "AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11771",
"url": "https://www.suse.com/security/cve/CVE-2019-11771"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-11771",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T08:05:57Z",
"details": "important"
}
],
"title": "CVE-2019-11771"
},
{
"cve": "CVE-2019-11775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11775"
}
],
"notes": [
{
"category": "general",
"text": "All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11775",
"url": "https://www.suse.com/security/cve/CVE-2019-11775"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-11775",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T08:05:57Z",
"details": "moderate"
}
],
"title": "CVE-2019-11775"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T08:05:57Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T08:05:57Z",
"details": "moderate"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T08:05:57Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T08:05:57Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-4473",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-4473"
}
],
"notes": [
{
"category": "general",
"text": "Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-4473",
"url": "https://www.suse.com/security/cve/CVE-2019-4473"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-4473",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T08:05:57Z",
"details": "important"
}
],
"title": "CVE-2019-4473"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T08:05:57Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
SUSE-SU-2019:14188-1
Vulnerability from csaf_suse - Published: 2019-10-04 08:10 - Updated: 2019-10-04 08:10Summary
Security update for java-1_7_0-ibm
Severity
Moderate
Notes
Title of the patch: Security update for java-1_7_0-ibm
Description of the patch: This update for java-1_7_0-ibm fixes the following issues:
Update to Java 7.0 Service Refresh 10 Fix Pack 50 (bsc#1147021).
Security issues fixed:
- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).
- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).
- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).
- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1147021).
- CVE-2019-4473: Fixed insecure RPATH in multiple binaries on AIX (bsc#1147021).
- CVE-2019-7317: Fixed use-after-free in libpng, affecting client-libs/java.awt (bsc#1147021).
- CVE-2019-11771: Fixed insecure RPATH in OpenJ9 on AIX (bsc#1147021).
- CVE-2019-11775: Fixed failure to privatize a value pulled out of the loop by versioning (bsc#1147021).
Patchnames: sleposp3-java-1_7_0-ibm-14188
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.8 (High)
Affected products
Recommended
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586 | — |
Vendor Fix
|
Threats
Impact
moderate
References
40 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_0-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_7_0-ibm fixes the following issues:\n\t \nUpdate to Java 7.0 Service Refresh 10 Fix Pack 50 (bsc#1147021).\n\nSecurity issues fixed:\n\n- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).\n- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).\n- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).\n- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1147021).\n- CVE-2019-4473: Fixed insecure RPATH in multiple binaries on AIX (bsc#1147021).\n- CVE-2019-7317: Fixed use-after-free in libpng, affecting client-libs/java.awt (bsc#1147021).\n- CVE-2019-11771: Fixed insecure RPATH in OpenJ9 on AIX (bsc#1147021).\n- CVE-2019-11775: Fixed failure to privatize a value pulled out of the loop by versioning (bsc#1147021).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sleposp3-java-1_7_0-ibm-14188",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_14188-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:14188-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-201914188-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:14188-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-October/005987.html"
},
{
"category": "self",
"summary": "SUSE Bug 1141782",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "self",
"summary": "SUSE Bug 1141783",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "self",
"summary": "SUSE Bug 1141789",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "self",
"summary": "SUSE Bug 1147021",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11771 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11771/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11775 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-4473 page",
"url": "https://www.suse.com/security/cve/CVE-2019-4473/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for java-1_7_0-ibm",
"tracking": {
"current_release_date": "2019-10-04T08:10:04Z",
"generator": {
"date": "2019-10-04T08:10:04Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:14188-1",
"initial_release_date": "2019-10-04T08:10:04Z",
"revision_history": [
{
"date": "2019-10-04T08:10:04Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"product": {
"name": "java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"product_id": "java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"product": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"product_id": "java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"product": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"product_id": "java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"product": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"product_id": "java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586",
"product": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586",
"product_id": "java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-pos:11:sp3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586"
},
"product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
},
"product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-11771",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11771"
}
],
"notes": [
{
"category": "general",
"text": "AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11771",
"url": "https://www.suse.com/security/cve/CVE-2019-11771"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-11771",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-04T08:10:04Z",
"details": "important"
}
],
"title": "CVE-2019-11771"
},
{
"cve": "CVE-2019-11775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11775"
}
],
"notes": [
{
"category": "general",
"text": "All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11775",
"url": "https://www.suse.com/security/cve/CVE-2019-11775"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-11775",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-04T08:10:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-11775"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-04T08:10:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-04T08:10:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-04T08:10:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-04T08:10:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-4473",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-4473"
}
],
"notes": [
{
"category": "general",
"text": "Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-4473",
"url": "https://www.suse.com/security/cve/CVE-2019-4473"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-4473",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-04T08:10:04Z",
"details": "important"
}
],
"title": "CVE-2019-4473"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-04T08:10:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
SUSE-SU-2019:1458-1
Vulnerability from csaf_suse - Published: 2019-06-11 08:09 - Updated: 2019-06-11 08:09Summary
Security update for MozillaThunderbird
Severity
Important
Notes
Title of the patch: Security update for MozillaThunderbird
Description of the patch: This update for MozillaThunderbird fixes the following issues:
Mozilla Thunderbird was updated to 60.7.0.
* Attachment pane of Write window no longer focussed when attaching
files using a keyboard shortcut
These security issues were fixed (MFSA 2019-15 bsc#1135824):
* CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
* CVE-2019-9816: Type confusion with object groups and UnboxedObjects
* CVE-2019-9817: Stealing of cross-domain images using canvas
* CVE-2019-9818: Use-after-free in crash generation server
* CVE-2019-9819: Compartment mismatch with fetch API
* CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell
* CVE-2019-11691: Use-after-free in XMLHttpRequest
* CVE-2019-11692: Use-after-free removing listeners in the event listener manager
* CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
* CVE-2019-7317: Use-after-free in png_image_free of libpng library
* CVE-2019-9797: Cross-origin theft of images with createImageBitmap
* CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext
* CVE-2019-11694: (Windows only) Uninitialized memory memory leakage in Windows sandbox
* CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
* CVE-2019-5798: Out-of-bounds read in Skia
* CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
Patchnames: SUSE-2019-1458,SUSE-SLE-Product-WE-15-2019-1458,SUSE-SLE-Product-WE-15-SP1-2019-1458
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
4.3 (Medium)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
63 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for MozillaThunderbird",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for MozillaThunderbird fixes the following issues:\n\nMozilla Thunderbird was updated to 60.7.0.\n\n* Attachment pane of Write window no longer focussed when attaching\n files using a keyboard shortcut\n\nThese security issues were fixed (MFSA 2019-15 bsc#1135824):\n\n* CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS\n* CVE-2019-9816: Type confusion with object groups and UnboxedObjects\n* CVE-2019-9817: Stealing of cross-domain images using canvas\n* CVE-2019-9818: Use-after-free in crash generation server\n* CVE-2019-9819: Compartment mismatch with fetch API\n* CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell\n* CVE-2019-11691: Use-after-free in XMLHttpRequest\n* CVE-2019-11692: Use-after-free removing listeners in the event listener manager\n* CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux\n* CVE-2019-7317: Use-after-free in png_image_free of libpng library\n* CVE-2019-9797: Cross-origin theft of images with createImageBitmap\n* CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext\n* CVE-2019-11694: (Windows only) Uninitialized memory memory leakage in Windows sandbox\n* CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks\n* CVE-2019-5798: Out-of-bounds read in Skia\n* CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-1458,SUSE-SLE-Product-WE-15-2019-1458,SUSE-SLE-Product-WE-15-SP1-2019-1458",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_1458-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:1458-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191458-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:1458-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html"
},
{
"category": "self",
"summary": "SUSE Bug 1130694",
"url": "https://bugzilla.suse.com/1130694"
},
{
"category": "self",
"summary": "SUSE Bug 1133267",
"url": "https://bugzilla.suse.com/1133267"
},
{
"category": "self",
"summary": "SUSE Bug 1135824",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18511 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11691 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11692 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11692/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11693 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11694 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11698 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5798 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9797 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9800 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9815 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9817 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9819 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9820 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9820/"
}
],
"title": "Security update for MozillaThunderbird",
"tracking": {
"current_release_date": "2019-06-11T08:09:40Z",
"generator": {
"date": "2019-06-11T08:09:40Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:1458-1",
"initial_release_date": "2019-06-11T08:09:40Z",
"revision_history": [
{
"date": "2019-06-11T08:09:40Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-60.7.0-3.33.2.aarch64",
"product": {
"name": "MozillaThunderbird-60.7.0-3.33.2.aarch64",
"product_id": "MozillaThunderbird-60.7.0-3.33.2.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.aarch64",
"product": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.aarch64",
"product_id": "MozillaThunderbird-translations-common-60.7.0-3.33.2.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.aarch64",
"product": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.aarch64",
"product_id": "MozillaThunderbird-translations-other-60.7.0-3.33.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-60.7.0-3.33.2.ppc64le",
"product": {
"name": "MozillaThunderbird-60.7.0-3.33.2.ppc64le",
"product_id": "MozillaThunderbird-60.7.0-3.33.2.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.ppc64le",
"product": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.ppc64le",
"product_id": "MozillaThunderbird-translations-common-60.7.0-3.33.2.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.ppc64le",
"product": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.ppc64le",
"product_id": "MozillaThunderbird-translations-other-60.7.0-3.33.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-60.7.0-3.33.2.s390x",
"product": {
"name": "MozillaThunderbird-60.7.0-3.33.2.s390x",
"product_id": "MozillaThunderbird-60.7.0-3.33.2.s390x"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.s390x",
"product": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.s390x",
"product_id": "MozillaThunderbird-translations-common-60.7.0-3.33.2.s390x"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.s390x",
"product": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.s390x",
"product_id": "MozillaThunderbird-translations-other-60.7.0-3.33.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-60.7.0-3.33.2.x86_64",
"product": {
"name": "MozillaThunderbird-60.7.0-3.33.2.x86_64",
"product_id": "MozillaThunderbird-60.7.0-3.33.2.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-buildsymbols-60.7.0-3.33.2.x86_64",
"product": {
"name": "MozillaThunderbird-buildsymbols-60.7.0-3.33.2.x86_64",
"product_id": "MozillaThunderbird-buildsymbols-60.7.0-3.33.2.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"product": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"product_id": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"product": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"product_id": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 15",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 15",
"product_id": "SUSE Linux Enterprise Workstation Extension 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 15 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:15:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15",
"product_id": "SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15",
"product_id": "SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15",
"product_id": "SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18511"
}
],
"notes": [
{
"category": "general",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18511",
"url": "https://www.suse.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1125330"
},
{
"category": "external",
"summary": "SUSE Bug 1125396 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1125396"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-18511"
},
{
"cve": "CVE-2019-11691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11691"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11691",
"url": "https://www.suse.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11691",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-11691"
},
{
"cve": "CVE-2019-11692",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11692"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11692",
"url": "https://www.suse.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11692",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-11692"
},
{
"cve": "CVE-2019-11693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11693"
}
],
"notes": [
{
"category": "general",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11693",
"url": "https://www.suse.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11693",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-11693"
},
{
"cve": "CVE-2019-11694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11694"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a call to access an otherwise unavailable file. This results in the potential leaking of information stored at that memory location. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11694",
"url": "https://www.suse.com/security/cve/CVE-2019-11694"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11694",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-11694"
},
{
"cve": "CVE-2019-11698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11698"
}
],
"notes": [
{
"category": "general",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11698",
"url": "https://www.suse.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11698",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-11698"
},
{
"cve": "CVE-2019-5798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5798"
}
],
"notes": [
{
"category": "general",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5798",
"url": "https://www.suse.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1129059"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "moderate"
}
],
"title": "CVE-2019-5798"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
},
{
"cve": "CVE-2019-9797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9797"
}
],
"notes": [
{
"category": "general",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9797",
"url": "https://www.suse.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "SUSE Bug 1129821 for CVE-2019-9797",
"url": "https://bugzilla.suse.com/1129821"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9797",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9797"
},
{
"cve": "CVE-2019-9800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9800"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9800",
"url": "https://www.suse.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9800",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9800"
},
{
"cve": "CVE-2019-9815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9815"
}
],
"notes": [
{
"category": "general",
"text": "If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main thread and any worker threads. *Note: users need to update to macOS 10.14.5 in order to take advantage of this change.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9815",
"url": "https://www.suse.com/security/cve/CVE-2019-9815"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9815",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9815"
},
{
"cve": "CVE-2019-9816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9816"
}
],
"notes": [
{
"category": "general",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9816",
"url": "https://www.suse.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9816",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9816"
},
{
"cve": "CVE-2019-9817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9817"
}
],
"notes": [
{
"category": "general",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9817",
"url": "https://www.suse.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9817",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9817"
},
{
"cve": "CVE-2019-9818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9818"
}
],
"notes": [
{
"category": "general",
"text": "A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. *Note: this vulnerability only affects Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9818",
"url": "https://www.suse.com/security/cve/CVE-2019-9818"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9818",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9818"
},
{
"cve": "CVE-2019-9819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9819"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9819",
"url": "https://www.suse.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9819",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9819"
},
{
"cve": "CVE-2019-9820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9820"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9820",
"url": "https://www.suse.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9820",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9820"
}
]
}
SUSE-SU-2019:2002-1
Vulnerability from csaf_suse - Published: 2019-07-29 11:00 - Updated: 2019-07-29 11:00Summary
Security update for java-11-openjdk
Severity
Important
Notes
Title of the patch: Security update for java-11-openjdk
Description of the patch: This update for java-11-openjdk to version jdk-11.0.4+11 fixes the following issues:
Security issues fixed:
- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
- CVE-2019-2762: Exceptional throw cases (bsc#1141782).
- CVE-2019-2766: Improve file protocol handling (bsc#1141789).
- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
- CVE-2019-2786: More limited privilege usage (bsc#1141787).
- CVE-2019-7317: Improve PNG support options (bsc#1141780).
- CVE-2019-2818: Better Poly1305 support (bsc#1141788).
- CVE-2019-2816: Normalize normalization (bsc#1141785).
- CVE-2019-2821: Improve TLS negotiation (bsc#1141781).
- Certificate validation improvements
Non-security issues fixed:
- Do not fail installation when the manpages are not present (bsc#1115375)
- Backport upstream fix for JDK-8208602: Cannot read PEM X.509 cert if
there is whitespace after the header or footer (bsc#1140461)
Patchnames: SUSE-2019-2002,SUSE-SLE-Module-Basesystem-15-2019-2002,SUSE-SLE-Module-Basesystem-15-SP1-2019-2002,SUSE-SLE-Module-Development-Tools-OBS-15-2019-2002,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2002
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.1 (Medium)
Affected products
Recommended
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
51 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-11-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-11-openjdk to version jdk-11.0.4+11 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).\n- CVE-2019-2762: Exceptional throw cases (bsc#1141782).\n- CVE-2019-2766: Improve file protocol handling (bsc#1141789).\n- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).\n- CVE-2019-2786: More limited privilege usage (bsc#1141787).\n- CVE-2019-7317: Improve PNG support options (bsc#1141780).\n- CVE-2019-2818: Better Poly1305 support (bsc#1141788).\n- CVE-2019-2816: Normalize normalization (bsc#1141785).\n- CVE-2019-2821: Improve TLS negotiation (bsc#1141781).\n- Certificate validation improvements\n\nNon-security issues fixed:\n\n- Do not fail installation when the manpages are not present (bsc#1115375)\n- Backport upstream fix for JDK-8208602: Cannot read PEM X.509 cert if\n there is whitespace after the header or footer (bsc#1140461)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-2002,SUSE-SLE-Module-Basesystem-15-2019-2002,SUSE-SLE-Module-Basesystem-15-SP1-2019-2002,SUSE-SLE-Module-Development-Tools-OBS-15-2019-2002,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2002",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_2002-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:2002-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192002-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:2002-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192002-1.html"
},
{
"category": "self",
"summary": "SUSE Bug 1115375",
"url": "https://bugzilla.suse.com/1115375"
},
{
"category": "self",
"summary": "SUSE Bug 1140461",
"url": "https://bugzilla.suse.com/1140461"
},
{
"category": "self",
"summary": "SUSE Bug 1141780",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "self",
"summary": "SUSE Bug 1141781",
"url": "https://bugzilla.suse.com/1141781"
},
{
"category": "self",
"summary": "SUSE Bug 1141782",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "self",
"summary": "SUSE Bug 1141783",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "self",
"summary": "SUSE Bug 1141784",
"url": "https://bugzilla.suse.com/1141784"
},
{
"category": "self",
"summary": "SUSE Bug 1141785",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "self",
"summary": "SUSE Bug 1141787",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "self",
"summary": "SUSE Bug 1141788",
"url": "https://bugzilla.suse.com/1141788"
},
{
"category": "self",
"summary": "SUSE Bug 1141789",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2745 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2786 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2821 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for java-11-openjdk",
"tracking": {
"current_release_date": "2019-07-29T11:00:36Z",
"generator": {
"date": "2019-07-29T11:00:36Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:2002-1",
"initial_release_date": "2019-07-29T11:00:36Z",
"revision_history": [
{
"date": "2019-07-29T11:00:36Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"product": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"product_id": "java-11-openjdk-11.0.4.0-3.33.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.aarch64",
"product": {
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.aarch64",
"product_id": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"product": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"product_id": "java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"product": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"product_id": "java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"product": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"product_id": "java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.aarch64",
"product": {
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.aarch64",
"product_id": "java-11-openjdk-jmods-11.0.4.0-3.33.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.aarch64",
"product": {
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.aarch64",
"product_id": "java-11-openjdk-src-11.0.4.0-3.33.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.4.0-3.33.1.i586",
"product": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.i586",
"product_id": "java-11-openjdk-11.0.4.0-3.33.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.i586",
"product": {
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.i586",
"product_id": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.i586",
"product": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.i586",
"product_id": "java-11-openjdk-demo-11.0.4.0-3.33.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.i586",
"product": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.i586",
"product_id": "java-11-openjdk-devel-11.0.4.0-3.33.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.i586",
"product": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.i586",
"product_id": "java-11-openjdk-headless-11.0.4.0-3.33.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.i586",
"product": {
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.i586",
"product_id": "java-11-openjdk-jmods-11.0.4.0-3.33.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.i586",
"product": {
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.i586",
"product_id": "java-11-openjdk-src-11.0.4.0-3.33.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-11.0.4.0-3.33.1.noarch",
"product": {
"name": "java-11-openjdk-javadoc-11.0.4.0-3.33.1.noarch",
"product_id": "java-11-openjdk-javadoc-11.0.4.0-3.33.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"product": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"product_id": "java-11-openjdk-11.0.4.0-3.33.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.ppc64le",
"product": {
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.ppc64le",
"product_id": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"product": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"product_id": "java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"product": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"product_id": "java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"product": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"product_id": "java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.ppc64le",
"product": {
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.ppc64le",
"product_id": "java-11-openjdk-jmods-11.0.4.0-3.33.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.ppc64le",
"product": {
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.ppc64le",
"product_id": "java-11-openjdk-src-11.0.4.0-3.33.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.4.0-3.33.1.s390x",
"product": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.s390x",
"product_id": "java-11-openjdk-11.0.4.0-3.33.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.s390x",
"product": {
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.s390x",
"product_id": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"product": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"product_id": "java-11-openjdk-demo-11.0.4.0-3.33.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"product": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"product_id": "java-11-openjdk-devel-11.0.4.0-3.33.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"product": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"product_id": "java-11-openjdk-headless-11.0.4.0-3.33.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.s390x",
"product": {
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.s390x",
"product_id": "java-11-openjdk-jmods-11.0.4.0-3.33.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.s390x",
"product": {
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.s390x",
"product_id": "java-11-openjdk-src-11.0.4.0-3.33.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"product": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"product_id": "java-11-openjdk-11.0.4.0-3.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.x86_64",
"product": {
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.x86_64",
"product_id": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"product": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"product_id": "java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"product": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"product_id": "java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"product": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"product_id": "java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.x86_64",
"product": {
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.x86_64",
"product_id": "java-11-openjdk-jmods-11.0.4.0-3.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.x86_64",
"product": {
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.x86_64",
"product_id": "java-11-openjdk-src-11.0.4.0-3.33.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64"
},
"product_reference": "java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le"
},
"product_reference": "java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x"
},
"product_reference": "java-11-openjdk-11.0.4.0-3.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64"
},
"product_reference": "java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64"
},
"product_reference": "java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le"
},
"product_reference": "java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x"
},
"product_reference": "java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64"
},
"product_reference": "java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64"
},
"product_reference": "java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le"
},
"product_reference": "java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x"
},
"product_reference": "java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64"
},
"product_reference": "java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64"
},
"product_reference": "java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le"
},
"product_reference": "java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x"
},
"product_reference": "java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
},
"product_reference": "java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64"
},
"product_reference": "java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le"
},
"product_reference": "java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x"
},
"product_reference": "java-11-openjdk-11.0.4.0-3.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64"
},
"product_reference": "java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64"
},
"product_reference": "java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le"
},
"product_reference": "java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x"
},
"product_reference": "java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64"
},
"product_reference": "java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64"
},
"product_reference": "java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le"
},
"product_reference": "java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x"
},
"product_reference": "java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64"
},
"product_reference": "java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64"
},
"product_reference": "java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le"
},
"product_reference": "java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x"
},
"product_reference": "java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
},
"product_reference": "java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-2745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2745"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2745",
"url": "https://www.suse.com/security/cve/CVE-2019-2745"
},
{
"category": "external",
"summary": "SUSE Bug 1141784 for CVE-2019-2745",
"url": "https://bugzilla.suse.com/1141784"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-2745"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2786"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2786",
"url": "https://www.suse.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "SUSE Bug 1141787 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-2786"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-2818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2818"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2818",
"url": "https://www.suse.com/security/cve/CVE-2019-2818"
},
{
"category": "external",
"summary": "SUSE Bug 1141788 for CVE-2019-2818",
"url": "https://bugzilla.suse.com/1141788"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-2818"
},
{
"cve": "CVE-2019-2821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2821"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2821",
"url": "https://www.suse.com/security/cve/CVE-2019-2821"
},
{
"category": "external",
"summary": "SUSE Bug 1141781 for CVE-2019-2821",
"url": "https://bugzilla.suse.com/1141781"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-2821"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
SUSE-SU-2019:2021-1
Vulnerability from csaf_suse - Published: 2019-07-30 14:39 - Updated: 2019-07-30 14:39Summary
Security update for java-1_8_0-openjdk
Severity
Important
Notes
Title of the patch: Security update for java-1_8_0-openjdk
Description of the patch: This update for java-1_8_0-openjdk to version 8u222 fixes the following issues:
Security issues fixed:
- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
- CVE-2019-2762: Exceptional throw cases (bsc#1141782).
- CVE-2019-2766: Improve file protocol handling (bsc#1141789).
- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
- CVE-2019-2786: More limited privilege usage (bsc#1141787).
- CVE-2019-2816: Normalize normalization (bsc#1141785).
- CVE-2019-2842: Extended AES support (bsc#1141786).
- CVE-2019-7317: Improve PNG support (bsc#1141780).
- Certificate validation improvements
Non-security issue fixed:
- Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)
Patchnames: SUSE-2019-2021,SUSE-SLE-Module-Development-Tools-OBS-15-2019-2021,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2021,SUSE-SLE-Module-Legacy-15-2019-2021,SUSE-SLE-Module-Legacy-15-SP1-2019-2021,SUSE-SLE-Module-Packagehub-Subpackages-15-2019-2021
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.1 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
References
46 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_8_0-openjdk to version 8u222 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).\n- CVE-2019-2762: Exceptional throw cases (bsc#1141782).\n- CVE-2019-2766: Improve file protocol handling (bsc#1141789).\n- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).\n- CVE-2019-2786: More limited privilege usage (bsc#1141787).\n- CVE-2019-2816: Normalize normalization (bsc#1141785).\n- CVE-2019-2842: Extended AES support (bsc#1141786).\n- CVE-2019-7317: Improve PNG support (bsc#1141780).\n- Certificate validation improvements\n\nNon-security issue fixed:\n\n- Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-2021,SUSE-SLE-Module-Development-Tools-OBS-15-2019-2021,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2021,SUSE-SLE-Module-Legacy-15-2019-2021,SUSE-SLE-Module-Legacy-15-SP1-2019-2021,SUSE-SLE-Module-Packagehub-Subpackages-15-2019-2021",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_2021-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:2021-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192021-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:2021-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-July/005760.html"
},
{
"category": "self",
"summary": "SUSE Bug 1115375",
"url": "https://bugzilla.suse.com/1115375"
},
{
"category": "self",
"summary": "SUSE Bug 1141780",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "self",
"summary": "SUSE Bug 1141782",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "self",
"summary": "SUSE Bug 1141783",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "self",
"summary": "SUSE Bug 1141784",
"url": "https://bugzilla.suse.com/1141784"
},
{
"category": "self",
"summary": "SUSE Bug 1141785",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "self",
"summary": "SUSE Bug 1141786",
"url": "https://bugzilla.suse.com/1141786"
},
{
"category": "self",
"summary": "SUSE Bug 1141787",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "self",
"summary": "SUSE Bug 1141789",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2745 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2786 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2842 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for java-1_8_0-openjdk",
"tracking": {
"current_release_date": "2019-07-30T14:39:13Z",
"generator": {
"date": "2019-07-30T14:39:13Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:2021-1",
"initial_release_date": "2019-07-30T14:39:13Z",
"revision_history": [
{
"date": "2019-07-30T14:39:13Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"product_id": "java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.aarch64",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.aarch64",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.i586",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.i586",
"product_id": "java-1_8_0-openjdk-1.8.0.222-3.24.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.i586",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.i586",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.i586",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.i586",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.i586",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.i586",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.i586",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.i586",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.i586",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.i586",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch",
"product": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch",
"product_id": "java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"product_id": "java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.ppc64le",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.ppc64le",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"product_id": "java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.s390x",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.s390x",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"product_id": "java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.x86_64",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.x86_64",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Legacy 15",
"product": {
"name": "SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-legacy:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Legacy 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-legacy:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Package Hub 15",
"product": {
"name": "SUSE Linux Enterprise Module for Package Hub 15",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:packagehub:15"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch as component of SUSE Linux Enterprise Module for Package Hub 15",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
},
"product_reference": "java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-2745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2745"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2745",
"url": "https://www.suse.com/security/cve/CVE-2019-2745"
},
{
"category": "external",
"summary": "SUSE Bug 1141784 for CVE-2019-2745",
"url": "https://bugzilla.suse.com/1141784"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-30T14:39:13Z",
"details": "moderate"
}
],
"title": "CVE-2019-2745"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-30T14:39:13Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-30T14:39:13Z",
"details": "moderate"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-30T14:39:13Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2786"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2786",
"url": "https://www.suse.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "SUSE Bug 1141787 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-30T14:39:13Z",
"details": "moderate"
}
],
"title": "CVE-2019-2786"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-30T14:39:13Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-2842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2842"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE). The supported version that is affected is Java SE: 8u212. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2842",
"url": "https://www.suse.com/security/cve/CVE-2019-2842"
},
{
"category": "external",
"summary": "SUSE Bug 1141786 for CVE-2019-2842",
"url": "https://bugzilla.suse.com/1141786"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-30T14:39:13Z",
"details": "moderate"
}
],
"title": "CVE-2019-2842"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-30T14:39:13Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…