Security update for MozillaFirefox, MozillaFirefox-branding-SLE SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:1669-1 Final 1 1 2017-06-26T06:11:53Z current 2017-06-26T06:11:53Z 2017-06-26T06:11:53Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for MozillaFirefox, MozillaFirefox-branding-SLE The MozillaFirefox was updated to the new ESR 52.2 release, which fixes the following issues (bsc#1043960): * MFSA 2017-16/CVE-2017-7758 Out-of-bounds read in Opus encoder * MFSA 2017-16/CVE-2017-7749 Use-after-free during docshell reloading * MFSA 2017-16/CVE-2017-7751 Use-after-free with content viewer listeners * MFSA 2017-16/CVE-2017-5472 Use-after-free using destroyed node when regenerating trees * MFSA 2017-16/CVE-2017-5470 Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2 * MFSA 2017-16/CVE-2017-7752 Use-after-free with IME input * MFSA 2017-16/CVE-2017-7750 Use-after-free with track elements * MFSA 2017-16/CVE-2017-7768 32 byte arbitrary file read through Mozilla Maintenance Service * MFSA 2017-16/CVE-2017-7778 Vulnerabilities in the Graphite 2 library * MFSA 2017-16/CVE-2017-7754 Out-of-bounds read in WebGL with ImageInfo object * MFSA 2017-16/CVE-2017-7755 Privilege escalation through Firefox Installer with same directory DLL files * MFSA 2017-16/CVE-2017-7756 Use-after-free and use-after-scope logging XHR header errors * MFSA 2017-16/CVE-2017-7757 Use-after-free in IndexedDB * MFSA 2017-16/CVE-2017-7761 File deletion and privilege escalation through Mozilla Maintenance Service helper.exe application * MFSA 2017-16/CVE-2017-7763 Mac fonts render some unicode characters as spaces * MFSA 2017-16/CVE-2017-7765 Mark of the Web bypass when saving executable files * MFSA 2017-16/CVE-2017-7764 (bmo#1364283, bmo#http://www.unicode.org/reports/tr31/tr31-26 .html#Aspirational_Use_Scripts) Domain spoofing with combination of Canadian Syllabics and other unicode blocks - update to Firefox ESR 52.1 (bsc#1035082) * MFSA 2017-12/CVE-2016-10196 Vulnerabilities in Libevent library * MFSA 2017-12/CVE-2017-5443 Out-of-bounds write during BinHex decoding * MFSA 2017-12/CVE-2017-5429 Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and Firefox ESR 52.1 * MFSA 2017-12/CVE-2017-5464 Memory corruption with accessibility and DOM manipulation * MFSA 2017-12/CVE-2017-5465 Out-of-bounds read in ConvolvePixel * MFSA 2017-12/CVE-2017-5466 Origin confusion when reloading isolated data:text/html URL * MFSA 2017-12/CVE-2017-5467 Memory corruption when drawing Skia content * MFSA 2017-12/CVE-2017-5460 Use-after-free in frame selection * MFSA 2017-12/CVE-2017-5461 Out-of-bounds write in Base64 encoding in NSS * MFSA 2017-12/CVE-2017-5448 Out-of-bounds write in ClearKeyDecryptor * MFSA 2017-12/CVE-2017-5449 Crash during bidirectional unicode manipulation with animation * MFSA 2017-12/CVE-2017-5446 Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data * MFSA 2017-12/CVE-2017-5447 Out-of-bounds read during glyph processing * MFSA 2017-12/CVE-2017-5444 Buffer overflow while parsing application/http-index-format content * MFSA 2017-12/CVE-2017-5445 Uninitialized values used while parsing application/http- index-format content * MFSA 2017-12/CVE-2017-5442 Use-after-free during style changes * MFSA 2017-12/CVE-2017-5469 Potential Buffer overflow in flex-generated code * MFSA 2017-12/CVE-2017-5440 Use-after-free in txExecutionState destructor during XSLT processing * MFSA 2017-12/CVE-2017-5441 Use-after-free with selection during scroll events * MFSA 2017-12/CVE-2017-5439 Use-after-free in nsTArray Length() during XSLT processing * MFSA 2017-12/CVE-2017-5438 Use-after-free in nsAutoPtr during XSLT processing * MFSA 2017-12/CVE-2017-5436 Out-of-bounds write with malicious font in Graphite 2 * MFSA 2017-12/CVE-2017-5435 Use-after-free during transaction processing in the editor * MFSA 2017-12/CVE-2017-5434 Use-after-free during focus handling * MFSA 2017-12/CVE-2017-5433 Use-after-free in SMIL animation functions * MFSA 2017-12/CVE-2017-5432 Use-after-free in text input selection * MFSA 2017-12/CVE-2017-5430 Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1 * MFSA 2017-12/CVE-2017-5459 Buffer overflow in WebGL * MFSA 2017-12/CVE-2017-5462 DRBG flaw in NSS * MFSA 2017-12/CVE-2017-5455 Sandbox escape through internal feed reader APIs * MFSA 2017-12/CVE-2017-5454 Sandbox escape allowing file system read access through file picker * MFSA 2017-12/CVE-2017-5456 Sandbox escape allowing local file system access * MFSA 2017-12/CVE-2017-5451 Addressbar spoofing with onblur event The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-OpenStack-Cloud-6-2017-1035,SUSE-SLE-DESKTOP-12-SP2-2017-1035,SUSE-SLE-RPI-12-SP2-2017-1035,SUSE-SLE-SAP-12-2017-1035,SUSE-SLE-SAP-12-SP1-2017-1035,SUSE-SLE-SDK-12-SP2-2017-1035,SUSE-SLE-SERVER-12-2017-1035,SUSE-SLE-SERVER-12-SP1-2017-1035,SUSE-SLE-SERVER-12-SP2-2017-1035 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ Link for SUSE-SU-2017:1669-1 https://lists.suse.com/pipermail/sle-security-updates/2017-June/002976.html E-Mail link for SUSE-SU-2017:1669-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://www.suse.com/security/cve/CVE-2016-10196/ SUSE CVE CVE-2016-10196 page https://www.suse.com/security/cve/CVE-2017-5429/ SUSE CVE CVE-2017-5429 page https://www.suse.com/security/cve/CVE-2017-5430/ SUSE CVE CVE-2017-5430 page https://www.suse.com/security/cve/CVE-2017-5432/ SUSE CVE CVE-2017-5432 page https://www.suse.com/security/cve/CVE-2017-5433/ SUSE CVE CVE-2017-5433 page https://www.suse.com/security/cve/CVE-2017-5434/ SUSE CVE CVE-2017-5434 page https://www.suse.com/security/cve/CVE-2017-5435/ SUSE CVE CVE-2017-5435 page https://www.suse.com/security/cve/CVE-2017-5436/ SUSE CVE CVE-2017-5436 page https://www.suse.com/security/cve/CVE-2017-5438/ SUSE CVE CVE-2017-5438 page https://www.suse.com/security/cve/CVE-2017-5439/ SUSE CVE CVE-2017-5439 page https://www.suse.com/security/cve/CVE-2017-5440/ SUSE CVE CVE-2017-5440 page https://www.suse.com/security/cve/CVE-2017-5441/ SUSE CVE CVE-2017-5441 page https://www.suse.com/security/cve/CVE-2017-5442/ SUSE CVE CVE-2017-5442 page https://www.suse.com/security/cve/CVE-2017-5443/ SUSE CVE CVE-2017-5443 page https://www.suse.com/security/cve/CVE-2017-5444/ SUSE CVE CVE-2017-5444 page https://www.suse.com/security/cve/CVE-2017-5445/ SUSE CVE CVE-2017-5445 page https://www.suse.com/security/cve/CVE-2017-5446/ SUSE CVE CVE-2017-5446 page https://www.suse.com/security/cve/CVE-2017-5447/ SUSE CVE CVE-2017-5447 page https://www.suse.com/security/cve/CVE-2017-5448/ SUSE CVE CVE-2017-5448 page https://www.suse.com/security/cve/CVE-2017-5449/ SUSE CVE CVE-2017-5449 page https://www.suse.com/security/cve/CVE-2017-5451/ SUSE CVE CVE-2017-5451 page https://www.suse.com/security/cve/CVE-2017-5454/ SUSE CVE CVE-2017-5454 page https://www.suse.com/security/cve/CVE-2017-5455/ SUSE CVE CVE-2017-5455 page https://www.suse.com/security/cve/CVE-2017-5456/ SUSE CVE CVE-2017-5456 page https://www.suse.com/security/cve/CVE-2017-5459/ SUSE CVE CVE-2017-5459 page https://www.suse.com/security/cve/CVE-2017-5460/ SUSE CVE CVE-2017-5460 page https://www.suse.com/security/cve/CVE-2017-5461/ SUSE CVE CVE-2017-5461 page https://www.suse.com/security/cve/CVE-2017-5462/ SUSE CVE CVE-2017-5462 page https://www.suse.com/security/cve/CVE-2017-5464/ SUSE CVE CVE-2017-5464 page https://www.suse.com/security/cve/CVE-2017-5465/ SUSE CVE CVE-2017-5465 page https://www.suse.com/security/cve/CVE-2017-5466/ SUSE CVE CVE-2017-5466 page https://www.suse.com/security/cve/CVE-2017-5467/ SUSE CVE CVE-2017-5467 page https://www.suse.com/security/cve/CVE-2017-5469/ SUSE CVE CVE-2017-5469 page https://www.suse.com/security/cve/CVE-2017-5470/ SUSE CVE CVE-2017-5470 page https://www.suse.com/security/cve/CVE-2017-5472/ SUSE CVE CVE-2017-5472 page https://www.suse.com/security/cve/CVE-2017-7749/ SUSE CVE CVE-2017-7749 page https://www.suse.com/security/cve/CVE-2017-7750/ SUSE CVE CVE-2017-7750 page https://www.suse.com/security/cve/CVE-2017-7751/ SUSE CVE CVE-2017-7751 page https://www.suse.com/security/cve/CVE-2017-7752/ SUSE CVE CVE-2017-7752 page https://www.suse.com/security/cve/CVE-2017-7754/ SUSE CVE CVE-2017-7754 page https://www.suse.com/security/cve/CVE-2017-7755/ SUSE CVE CVE-2017-7755 page https://www.suse.com/security/cve/CVE-2017-7756/ SUSE CVE CVE-2017-7756 page https://www.suse.com/security/cve/CVE-2017-7757/ SUSE CVE CVE-2017-7757 page https://www.suse.com/security/cve/CVE-2017-7758/ SUSE CVE CVE-2017-7758 page https://www.suse.com/security/cve/CVE-2017-7761/ SUSE CVE CVE-2017-7761 page https://www.suse.com/security/cve/CVE-2017-7763/ SUSE CVE CVE-2017-7763 page https://www.suse.com/security/cve/CVE-2017-7764/ SUSE CVE CVE-2017-7764 page https://www.suse.com/security/cve/CVE-2017-7765/ SUSE CVE CVE-2017-7765 page https://www.suse.com/security/cve/CVE-2017-7768/ SUSE CVE CVE-2017-7768 page https://www.suse.com/security/cve/CVE-2017-7778/ SUSE CVE CVE-2017-7778 page SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE OpenStack Cloud 6 MozillaFirefox-52.2.0esr-108.3 MozillaFirefox-branding-SLE-52-31.1 MozillaFirefox-devel-52.2.0esr-108.3 MozillaFirefox-translations-52.2.0esr-108.3 MozillaFirefox-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Desktop 12 SP2 MozillaFirefox-branding-SLE-52-31.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 MozillaFirefox-translations-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Desktop 12 SP2 MozillaFirefox-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS MozillaFirefox-branding-SLE-52-31.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS MozillaFirefox-devel-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS MozillaFirefox-translations-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS MozillaFirefox-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server 12 SP2 MozillaFirefox-branding-SLE-52-31.1 as a component of SUSE Linux Enterprise Server 12 SP2 MozillaFirefox-translations-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server 12 SP2 MozillaFirefox-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server 12-LTSS MozillaFirefox-branding-SLE-52-31.1 as a component of SUSE Linux Enterprise Server 12-LTSS MozillaFirefox-devel-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server 12-LTSS MozillaFirefox-translations-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server 12-LTSS MozillaFirefox-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 MozillaFirefox-branding-SLE-52-31.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 MozillaFirefox-translations-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 MozillaFirefox-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 MozillaFirefox-branding-SLE-52-31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 MozillaFirefox-devel-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 MozillaFirefox-translations-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 MozillaFirefox-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 MozillaFirefox-branding-SLE-52-31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 MozillaFirefox-devel-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 MozillaFirefox-translations-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 MozillaFirefox-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 MozillaFirefox-branding-SLE-52-31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 MozillaFirefox-translations-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 MozillaFirefox-devel-52.2.0esr-108.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 MozillaFirefox-52.2.0esr-108.3 as a component of SUSE OpenStack Cloud 6 MozillaFirefox-branding-SLE-52-31.1 as a component of SUSE OpenStack Cloud 6 MozillaFirefox-devel-52.2.0esr-108.3 as a component of SUSE OpenStack Cloud 6 MozillaFirefox-translations-52.2.0esr-108.3 as a component of SUSE OpenStack Cloud 6 Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument. CVE-2016-10196 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2016-10196.html CVE-2016-10196 https://bugzilla.suse.com/1022918 SUSE Bug 1022918 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 https://bugzilla.suse.com/1075618 SUSE Bug 1075618 Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5429 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5429.html CVE-2017-5429 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5430 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5430.html CVE-2017-5430 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5432 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5432.html CVE-2017-5432 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5433 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5433.html CVE-2017-5433 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5434 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5434.html CVE-2017-5434 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5435 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5435.html CVE-2017-5435 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5436 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5436.html CVE-2017-5436 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035204 SUSE Bug 1035204 A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5438 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5438.html CVE-2017-5438 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5439 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5439.html CVE-2017-5439 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5440 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5440.html CVE-2017-5440 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5441 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5441.html CVE-2017-5441 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5442 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5442.html CVE-2017-5442 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5443 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5443.html CVE-2017-5443 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5444 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5444.html CVE-2017-5444 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5445 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5445.html CVE-2017-5445 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5446 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5446.html CVE-2017-5446 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to read otherwise inaccessible memory. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5447 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5447.html CVE-2017-5447 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecryptor" code runs within the Gecko Media Plugin (GMP) sandbox. If a second mechanism is found to escape the sandbox, this vulnerability allows for the writing of arbitrary data within memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5448 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5448.html CVE-2017-5448 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5449 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5449.html CVE-2017-5449 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5451 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 6 AV:N/AC:M/Au:S/C:P/I:P/A:P 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5451.html CVE-2017-5451 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5454 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 3.5 AV:N/AC:M/Au:S/C:P/I:N/A:N 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5454.html CVE-2017-5454 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53. CVE-2017-5455 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 4.6 AV:N/AC:H/Au:S/C:P/I:P/A:P 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5455.html CVE-2017-5455 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and write access to the local file system. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53. CVE-2017-5456 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5456.html CVE-2017-5456 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5459 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5459.html CVE-2017-5459 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5460 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5460.html CVE-2017-5460 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by leveraging incorrect base64 operations. CVE-2017-5461 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5461.html CVE-2017-5461 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue and Firefox ESR 52.1 has been updated with NSS version 3.28.4. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5462 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 2.6 AV:N/AC:H/Au:N/C:P/I:N/A:N 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5462.html CVE-2017-5462 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5464 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 4.3 AV:N/AC:H/Au:M/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5464.html CVE-2017-5464 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5465 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5465.html CVE-2017-5465 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will run the reloaded "data:text/html" page with its origin set incorrectly. This allows for a cross-site scripting (XSS) attack. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5466 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5466.html CVE-2017-5466 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5467 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5467.html CVE-2017-5467 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CVE-2017-5469 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5469.html CVE-2017-5469 https://bugzilla.suse.com/1035082 SUSE Bug 1035082 https://bugzilla.suse.com/1035209 SUSE Bug 1035209 Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. CVE-2017-5470 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5470.html CVE-2017-5470 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://bugzilla.suse.com/1044239 SUSE Bug 1044239 https://bugzilla.suse.com/1044240 SUSE Bug 1044240 https://bugzilla.suse.com/1044241 SUSE Bug 1044241 https://bugzilla.suse.com/1044242 SUSE Bug 1044242 A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no longer exists. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. CVE-2017-5472 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-5472.html CVE-2017-5472 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://bugzilla.suse.com/1044239 SUSE Bug 1044239 https://bugzilla.suse.com/1044240 SUSE Bug 1044240 https://bugzilla.suse.com/1044241 SUSE Bug 1044241 https://bugzilla.suse.com/1044242 SUSE Bug 1044242 A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. CVE-2017-7749 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-7749.html CVE-2017-7749 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://bugzilla.suse.com/1044239 SUSE Bug 1044239 https://bugzilla.suse.com/1044240 SUSE Bug 1044240 https://bugzilla.suse.com/1044241 SUSE Bug 1044241 https://bugzilla.suse.com/1044242 SUSE Bug 1044242 A use-after-free vulnerability during video control operations when a "<track>" element holds a reference to an older window if that window has been replaced in the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. CVE-2017-7750 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-7750.html CVE-2017-7750 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://bugzilla.suse.com/1044239 SUSE Bug 1044239 https://bugzilla.suse.com/1044240 SUSE Bug 1044240 https://bugzilla.suse.com/1044241 SUSE Bug 1044241 https://bugzilla.suse.com/1044242 SUSE Bug 1044242 A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. CVE-2017-7751 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-7751.html CVE-2017-7751 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://bugzilla.suse.com/1044239 SUSE Bug 1044239 https://bugzilla.suse.com/1044240 SUSE Bug 1044240 https://bugzilla.suse.com/1044241 SUSE Bug 1044241 https://bugzilla.suse.com/1044242 SUSE Bug 1044242 A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages due to how events are handled. This results in a potentially exploitable crash but would require specific user interaction to trigger. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. CVE-2017-7752 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-7752.html CVE-2017-7752 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://bugzilla.suse.com/1044239 SUSE Bug 1044239 https://bugzilla.suse.com/1044240 SUSE Bug 1044240 https://bugzilla.suse.com/1044241 SUSE Bug 1044241 https://bugzilla.suse.com/1044242 SUSE Bug 1044242 An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. CVE-2017-7754 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-7754.html CVE-2017-7754 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://bugzilla.suse.com/1044239 SUSE Bug 1044239 https://bugzilla.suse.com/1044240 SUSE Bug 1044240 https://bugzilla.suse.com/1044241 SUSE Bug 1044241 https://bugzilla.suse.com/1044242 SUSE Bug 1044242 The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer when it is run. This allows privileged execution if the installer is run with elevated privileges. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. CVE-2017-7755 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-7755.html CVE-2017-7755 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://bugzilla.suse.com/1044239 SUSE Bug 1044239 https://bugzilla.suse.com/1044240 SUSE Bug 1044240 https://bugzilla.suse.com/1044241 SUSE Bug 1044241 https://bugzilla.suse.com/1044242 SUSE Bug 1044242 A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). This could result in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. CVE-2017-7756 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-7756.html CVE-2017-7756 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://bugzilla.suse.com/1044239 SUSE Bug 1044239 https://bugzilla.suse.com/1044240 SUSE Bug 1044240 https://bugzilla.suse.com/1044241 SUSE Bug 1044241 https://bugzilla.suse.com/1044242 SUSE Bug 1044242 A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. CVE-2017-7757 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-7757.html CVE-2017-7757 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://bugzilla.suse.com/1044239 SUSE Bug 1044239 https://bugzilla.suse.com/1044240 SUSE Bug 1044240 https://bugzilla.suse.com/1044241 SUSE Bug 1044241 https://bugzilla.suse.com/1044242 SUSE Bug 1044242 An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while the encoder is in use. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. CVE-2017-7758 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-7758.html CVE-2017-7758 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://bugzilla.suse.com/1044239 SUSE Bug 1044239 https://bugzilla.suse.com/1044240 SUSE Bug 1044240 https://bugzilla.suse.com/1044241 SUSE Bug 1044241 https://bugzilla.suse.com/1044242 SUSE Bug 1044242 The Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable by non-privileged users. When this is combined with creation of a junction (a form of symbolic link), protected files in the target directory of the junction can be deleted by the Mozilla Maintenance Service, which has privileged access. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR < 52.2 and Firefox < 54. CVE-2017-7761 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 3.6 AV:L/AC:L/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-7761.html CVE-2017-7761 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://bugzilla.suse.com/1044239 SUSE Bug 1044239 https://bugzilla.suse.com/1044240 SUSE Bug 1044240 https://bugzilla.suse.com/1044241 SUSE Bug 1044241 https://bugzilla.suse.com/1044242 SUSE Bug 1044242 Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. CVE-2017-7763 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-7763.html CVE-2017-7763 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://bugzilla.suse.com/1044239 SUSE Bug 1044239 https://bugzilla.suse.com/1044240 SUSE Bug 1044240 https://bugzilla.suse.com/1044241 SUSE Bug 1044241 https://bugzilla.suse.com/1044242 SUSE Bug 1044242 Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw "punycode" form, allowing for domain name spoofing attacks through character confusion. The current Unicode standard allows characters from "Aspirational Use Scripts" such as Canadian Syllabics to be mixed with Latin characters in the "moderately restrictive" IDN profile. We have changed Firefox behavior to match the upcoming Unicode version 10.0 which removes this category and treats them as "Limited Use Scripts.". This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. CVE-2017-7764 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 4 AV:N/AC:H/Au:N/C:P/I:N/A:P 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-7764.html CVE-2017-7764 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://bugzilla.suse.com/1044239 SUSE Bug 1044239 https://bugzilla.suse.com/1044240 SUSE Bug 1044240 https://bugzilla.suse.com/1044241 SUSE Bug 1044241 https://bugzilla.suse.com/1044242 SUSE Bug 1044242 The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. CVE-2017-7765 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-7765.html CVE-2017-7765 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://bugzilla.suse.com/1044239 SUSE Bug 1044239 https://bugzilla.suse.com/1044240 SUSE Bug 1044240 https://bugzilla.suse.com/1044241 SUSE Bug 1044241 https://bugzilla.suse.com/1044242 SUSE Bug 1044242 The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the local system by convincing the service that it is reading a status file provided by the Mozilla Windows Updater. The Mozilla Maintenance Service executes with privileged access, bypassing system protections against unprivileged users. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR < 52.2 and Firefox < 54. CVE-2017-7768 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-7768.html CVE-2017-7768 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://bugzilla.suse.com/1044239 SUSE Bug 1044239 https://bugzilla.suse.com/1044240 SUSE Bug 1044240 https://bugzilla.suse.com/1044241 SUSE Bug 1044241 https://bugzilla.suse.com/1044242 SUSE Bug 1044242 A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Graphite 2 version 1.3.10. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. CVE-2017-7778 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-branding-SLE-52-31.1 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-devel-52.2.0esr-108.3 SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-52.2.0esr-108.3 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-branding-SLE-52-31.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.2.0esr-108.3 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.2.0esr-108.3 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/ https://www.suse.com/security/cve/CVE-2017-7778.html CVE-2017-7778 https://bugzilla.suse.com/1043960 SUSE Bug 1043960 https://bugzilla.suse.com/1044239 SUSE Bug 1044239 https://bugzilla.suse.com/1044240 SUSE Bug 1044240 https://bugzilla.suse.com/1044241 SUSE Bug 1044241 https://bugzilla.suse.com/1044242 SUSE Bug 1044242