suse-su-2018:4235-1
Vulnerability from csaf_suse
Published
2018-12-21 17:47
Modified
2018-12-21 17:47
Summary
Security update for MozillaFirefox, mozilla-nspr and mozilla-nss
Notes
Title of the patch
Security update for MozillaFirefox, mozilla-nspr and mozilla-nss
Description of the patch
This update for MozillaFirefox, mozilla-nss and mozilla-nspr fixes the following issues:
Issues fixed in MozillaFirefox:
- Update to Firefox ESR 60.4 (bsc#1119105)
- CVE-2018-17466: Fixed a buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11
- CVE-2018-18492: Fixed a use-after-free with select element
- CVE-2018-18493: Fixed a buffer overflow in accelerated 2D canvas with Skia
- CVE-2018-18494: Fixed a Same-origin policy violation using location attribute and performance.getEntries
to steal cross-origin URLs
- CVE-2018-18498: Fixed a integer overflow when calculating buffer sizes for images
- CVE-2018-12405: Fixed a few memory safety bugs
Issues fixed in mozilla-nss:
- Update to NSS 3.40.1 (bsc#1119105)
- CVE-2018-12404: Fixed a cache side-channel variant of the Bleichenbacher attack (bsc#1119069)
- CVE-2018-12384: Fixed an issue in the SSL handshake. NSS responded to an
SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. (bsc#1106873)
- CVE-2018-0495: Fixed a memory-cache side-channel attack with ECDSA signatures (bsc#1097410)
- Fixed a decryption failure during FFDHE key exchange
- Various security fixes in the ASN.1 code
Issues fixed in mozilla-nspr:
- Update mozilla-nspr to 4.20 (bsc#1119105)
Patchnames
SUSE-SLE-Module-Basesystem-15-2018-3044,SUSE-SLE-Module-Desktop-Applications-15-2018-3044,SUSE-SLE-Module-Development-Tools-OBS-15-2018-3044
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for MozillaFirefox, mozilla-nspr and mozilla-nss",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for MozillaFirefox, mozilla-nss and mozilla-nspr fixes the following issues:\n\nIssues fixed in MozillaFirefox:\n\n- Update to Firefox ESR 60.4 (bsc#1119105)\n- CVE-2018-17466: Fixed a buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11\n- CVE-2018-18492: Fixed a use-after-free with select element\n- CVE-2018-18493: Fixed a buffer overflow in accelerated 2D canvas with Skia\n- CVE-2018-18494: Fixed a Same-origin policy violation using location attribute and performance.getEntries\n to steal cross-origin URLs\n- CVE-2018-18498: Fixed a integer overflow when calculating buffer sizes for images\n- CVE-2018-12405: Fixed a few memory safety bugs\n\nIssues fixed in mozilla-nss:\n\n- Update to NSS 3.40.1 (bsc#1119105)\n- CVE-2018-12404: Fixed a cache side-channel variant of the Bleichenbacher attack (bsc#1119069)\n- CVE-2018-12384: Fixed an issue in the SSL handshake. NSS responded to an\n SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. (bsc#1106873)\n- CVE-2018-0495: Fixed a memory-cache side-channel attack with ECDSA signatures (bsc#1097410)\n- Fixed a decryption failure during FFDHE key exchange\n- Various security fixes in the ASN.1 code\n\nIssues fixed in mozilla-nspr:\n\n- Update mozilla-nspr to 4.20 (bsc#1119105)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Module-Basesystem-15-2018-3044,SUSE-SLE-Module-Desktop-Applications-15-2018-3044,SUSE-SLE-Module-Development-Tools-OBS-15-2018-3044",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_4235-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:4235-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20184235-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:4235-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-December/004998.html"
},
{
"category": "self",
"summary": "SUSE Bug 1097410",
"url": "https://bugzilla.suse.com/1097410"
},
{
"category": "self",
"summary": "SUSE Bug 1106873",
"url": "https://bugzilla.suse.com/1106873"
},
{
"category": "self",
"summary": "SUSE Bug 1119069",
"url": "https://bugzilla.suse.com/1119069"
},
{
"category": "self",
"summary": "SUSE Bug 1119105",
"url": "https://bugzilla.suse.com/1119105"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-0495 page",
"url": "https://www.suse.com/security/cve/CVE-2018-0495/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12384 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12384/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12404 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12404/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12405 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12405/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17466 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17466/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18492 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18492/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18493 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18493/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18494 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18494/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18498 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18498/"
}
],
"title": "Security update for MozillaFirefox, mozilla-nspr and mozilla-nss",
"tracking": {
"current_release_date": "2018-12-21T17:47:33Z",
"generator": {
"date": "2018-12-21T17:47:33Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:4235-1",
"initial_release_date": "2018-12-21T17:47:33Z",
"revision_history": [
{
"date": "2018-12-21T17:47:33Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libfreebl3-3.40.1-3.7.2.aarch64",
"product": {
"name": "libfreebl3-3.40.1-3.7.2.aarch64",
"product_id": "libfreebl3-3.40.1-3.7.2.aarch64"
}
},
{
"category": "product_version",
"name": "libsoftokn3-3.40.1-3.7.2.aarch64",
"product": {
"name": "libsoftokn3-3.40.1-3.7.2.aarch64",
"product_id": "libsoftokn3-3.40.1-3.7.2.aarch64"
}
},
{
"category": "product_version",
"name": "mozilla-nspr-4.20-3.3.2.aarch64",
"product": {
"name": "mozilla-nspr-4.20-3.3.2.aarch64",
"product_id": "mozilla-nspr-4.20-3.3.2.aarch64"
}
},
{
"category": "product_version",
"name": "mozilla-nspr-devel-4.20-3.3.2.aarch64",
"product": {
"name": "mozilla-nspr-devel-4.20-3.3.2.aarch64",
"product_id": "mozilla-nspr-devel-4.20-3.3.2.aarch64"
}
},
{
"category": "product_version",
"name": "mozilla-nss-3.40.1-3.7.2.aarch64",
"product": {
"name": "mozilla-nss-3.40.1-3.7.2.aarch64",
"product_id": "mozilla-nss-3.40.1-3.7.2.aarch64"
}
},
{
"category": "product_version",
"name": "mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"product": {
"name": "mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"product_id": "mozilla-nss-certs-3.40.1-3.7.2.aarch64"
}
},
{
"category": "product_version",
"name": "mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"product": {
"name": "mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"product_id": "mozilla-nss-devel-3.40.1-3.7.2.aarch64"
}
},
{
"category": "product_version",
"name": "mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"product": {
"name": "mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"product_id": "mozilla-nss-sysinit-3.40.1-3.7.2.aarch64"
}
},
{
"category": "product_version",
"name": "mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"product": {
"name": "mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"product_id": "mozilla-nss-tools-3.40.1-3.7.2.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-60.4.0-3.21.1.aarch64",
"product": {
"name": "MozillaFirefox-60.4.0-3.21.1.aarch64",
"product_id": "MozillaFirefox-60.4.0-3.21.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"product": {
"name": "MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"product_id": "MozillaFirefox-devel-60.4.0-3.21.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"product": {
"name": "MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"product_id": "MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"product": {
"name": "MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"product_id": "MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libfreebl3-3.40.1-3.7.2.ppc64le",
"product": {
"name": "libfreebl3-3.40.1-3.7.2.ppc64le",
"product_id": "libfreebl3-3.40.1-3.7.2.ppc64le"
}
},
{
"category": "product_version",
"name": "libsoftokn3-3.40.1-3.7.2.ppc64le",
"product": {
"name": "libsoftokn3-3.40.1-3.7.2.ppc64le",
"product_id": "libsoftokn3-3.40.1-3.7.2.ppc64le"
}
},
{
"category": "product_version",
"name": "mozilla-nspr-4.20-3.3.2.ppc64le",
"product": {
"name": "mozilla-nspr-4.20-3.3.2.ppc64le",
"product_id": "mozilla-nspr-4.20-3.3.2.ppc64le"
}
},
{
"category": "product_version",
"name": "mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"product": {
"name": "mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"product_id": "mozilla-nspr-devel-4.20-3.3.2.ppc64le"
}
},
{
"category": "product_version",
"name": "mozilla-nss-3.40.1-3.7.2.ppc64le",
"product": {
"name": "mozilla-nss-3.40.1-3.7.2.ppc64le",
"product_id": "mozilla-nss-3.40.1-3.7.2.ppc64le"
}
},
{
"category": "product_version",
"name": "mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"product": {
"name": "mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"product_id": "mozilla-nss-certs-3.40.1-3.7.2.ppc64le"
}
},
{
"category": "product_version",
"name": "mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"product": {
"name": "mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"product_id": "mozilla-nss-devel-3.40.1-3.7.2.ppc64le"
}
},
{
"category": "product_version",
"name": "mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"product": {
"name": "mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"product_id": "mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le"
}
},
{
"category": "product_version",
"name": "mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"product": {
"name": "mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"product_id": "mozilla-nss-tools-3.40.1-3.7.2.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-60.4.0-3.21.1.ppc64le",
"product": {
"name": "MozillaFirefox-60.4.0-3.21.1.ppc64le",
"product_id": "MozillaFirefox-60.4.0-3.21.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"product": {
"name": "MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"product_id": "MozillaFirefox-devel-60.4.0-3.21.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"product": {
"name": "MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"product_id": "MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"product": {
"name": "MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"product_id": "MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libfreebl3-3.40.1-3.7.2.s390x",
"product": {
"name": "libfreebl3-3.40.1-3.7.2.s390x",
"product_id": "libfreebl3-3.40.1-3.7.2.s390x"
}
},
{
"category": "product_version",
"name": "libsoftokn3-3.40.1-3.7.2.s390x",
"product": {
"name": "libsoftokn3-3.40.1-3.7.2.s390x",
"product_id": "libsoftokn3-3.40.1-3.7.2.s390x"
}
},
{
"category": "product_version",
"name": "mozilla-nspr-4.20-3.3.2.s390x",
"product": {
"name": "mozilla-nspr-4.20-3.3.2.s390x",
"product_id": "mozilla-nspr-4.20-3.3.2.s390x"
}
},
{
"category": "product_version",
"name": "mozilla-nspr-devel-4.20-3.3.2.s390x",
"product": {
"name": "mozilla-nspr-devel-4.20-3.3.2.s390x",
"product_id": "mozilla-nspr-devel-4.20-3.3.2.s390x"
}
},
{
"category": "product_version",
"name": "mozilla-nss-3.40.1-3.7.2.s390x",
"product": {
"name": "mozilla-nss-3.40.1-3.7.2.s390x",
"product_id": "mozilla-nss-3.40.1-3.7.2.s390x"
}
},
{
"category": "product_version",
"name": "mozilla-nss-certs-3.40.1-3.7.2.s390x",
"product": {
"name": "mozilla-nss-certs-3.40.1-3.7.2.s390x",
"product_id": "mozilla-nss-certs-3.40.1-3.7.2.s390x"
}
},
{
"category": "product_version",
"name": "mozilla-nss-devel-3.40.1-3.7.2.s390x",
"product": {
"name": "mozilla-nss-devel-3.40.1-3.7.2.s390x",
"product_id": "mozilla-nss-devel-3.40.1-3.7.2.s390x"
}
},
{
"category": "product_version",
"name": "mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"product": {
"name": "mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"product_id": "mozilla-nss-sysinit-3.40.1-3.7.2.s390x"
}
},
{
"category": "product_version",
"name": "mozilla-nss-tools-3.40.1-3.7.2.s390x",
"product": {
"name": "mozilla-nss-tools-3.40.1-3.7.2.s390x",
"product_id": "mozilla-nss-tools-3.40.1-3.7.2.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-60.4.0-3.21.1.s390x",
"product": {
"name": "MozillaFirefox-60.4.0-3.21.1.s390x",
"product_id": "MozillaFirefox-60.4.0-3.21.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"product": {
"name": "MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"product_id": "MozillaFirefox-devel-60.4.0-3.21.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"product": {
"name": "MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"product_id": "MozillaFirefox-translations-common-60.4.0-3.21.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"product": {
"name": "MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"product_id": "MozillaFirefox-translations-other-60.4.0-3.21.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libfreebl3-3.40.1-3.7.2.x86_64",
"product": {
"name": "libfreebl3-3.40.1-3.7.2.x86_64",
"product_id": "libfreebl3-3.40.1-3.7.2.x86_64"
}
},
{
"category": "product_version",
"name": "libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"product": {
"name": "libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"product_id": "libfreebl3-32bit-3.40.1-3.7.2.x86_64"
}
},
{
"category": "product_version",
"name": "libsoftokn3-3.40.1-3.7.2.x86_64",
"product": {
"name": "libsoftokn3-3.40.1-3.7.2.x86_64",
"product_id": "libsoftokn3-3.40.1-3.7.2.x86_64"
}
},
{
"category": "product_version",
"name": "libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"product": {
"name": "libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"product_id": "libsoftokn3-32bit-3.40.1-3.7.2.x86_64"
}
},
{
"category": "product_version",
"name": "mozilla-nspr-4.20-3.3.2.x86_64",
"product": {
"name": "mozilla-nspr-4.20-3.3.2.x86_64",
"product_id": "mozilla-nspr-4.20-3.3.2.x86_64"
}
},
{
"category": "product_version",
"name": "mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"product": {
"name": "mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"product_id": "mozilla-nspr-32bit-4.20-3.3.2.x86_64"
}
},
{
"category": "product_version",
"name": "mozilla-nspr-devel-4.20-3.3.2.x86_64",
"product": {
"name": "mozilla-nspr-devel-4.20-3.3.2.x86_64",
"product_id": "mozilla-nspr-devel-4.20-3.3.2.x86_64"
}
},
{
"category": "product_version",
"name": "mozilla-nss-3.40.1-3.7.2.x86_64",
"product": {
"name": "mozilla-nss-3.40.1-3.7.2.x86_64",
"product_id": "mozilla-nss-3.40.1-3.7.2.x86_64"
}
},
{
"category": "product_version",
"name": "mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"product": {
"name": "mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"product_id": "mozilla-nss-32bit-3.40.1-3.7.2.x86_64"
}
},
{
"category": "product_version",
"name": "mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"product": {
"name": "mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"product_id": "mozilla-nss-certs-3.40.1-3.7.2.x86_64"
}
},
{
"category": "product_version",
"name": "mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"product": {
"name": "mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"product_id": "mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64"
}
},
{
"category": "product_version",
"name": "mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"product": {
"name": "mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"product_id": "mozilla-nss-devel-3.40.1-3.7.2.x86_64"
}
},
{
"category": "product_version",
"name": "mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"product": {
"name": "mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"product_id": "mozilla-nss-sysinit-3.40.1-3.7.2.x86_64"
}
},
{
"category": "product_version",
"name": "mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"product": {
"name": "mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"product_id": "mozilla-nss-tools-3.40.1-3.7.2.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-60.4.0-3.21.1.x86_64",
"product": {
"name": "MozillaFirefox-60.4.0-3.21.1.x86_64",
"product_id": "MozillaFirefox-60.4.0-3.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"product": {
"name": "MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"product_id": "MozillaFirefox-devel-60.4.0-3.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"product": {
"name": "MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"product_id": "MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64",
"product": {
"name": "MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64",
"product_id": "MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Desktop Applications 15",
"product": {
"name": "SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-desktop-applications:15"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreebl3-3.40.1-3.7.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64"
},
"product_reference": "libfreebl3-3.40.1-3.7.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreebl3-3.40.1-3.7.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le"
},
"product_reference": "libfreebl3-3.40.1-3.7.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreebl3-3.40.1-3.7.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x"
},
"product_reference": "libfreebl3-3.40.1-3.7.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreebl3-3.40.1-3.7.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64"
},
"product_reference": "libfreebl3-3.40.1-3.7.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreebl3-32bit-3.40.1-3.7.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64"
},
"product_reference": "libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsoftokn3-3.40.1-3.7.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64"
},
"product_reference": "libsoftokn3-3.40.1-3.7.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsoftokn3-3.40.1-3.7.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le"
},
"product_reference": "libsoftokn3-3.40.1-3.7.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsoftokn3-3.40.1-3.7.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x"
},
"product_reference": "libsoftokn3-3.40.1-3.7.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsoftokn3-3.40.1-3.7.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64"
},
"product_reference": "libsoftokn3-3.40.1-3.7.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsoftokn3-32bit-3.40.1-3.7.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64"
},
"product_reference": "libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-4.20-3.3.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64"
},
"product_reference": "mozilla-nspr-4.20-3.3.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-4.20-3.3.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le"
},
"product_reference": "mozilla-nspr-4.20-3.3.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-4.20-3.3.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x"
},
"product_reference": "mozilla-nspr-4.20-3.3.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-4.20-3.3.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64"
},
"product_reference": "mozilla-nspr-4.20-3.3.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-32bit-4.20-3.3.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64"
},
"product_reference": "mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-devel-4.20-3.3.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64"
},
"product_reference": "mozilla-nspr-devel-4.20-3.3.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-devel-4.20-3.3.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le"
},
"product_reference": "mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-devel-4.20-3.3.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x"
},
"product_reference": "mozilla-nspr-devel-4.20-3.3.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-devel-4.20-3.3.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64"
},
"product_reference": "mozilla-nspr-devel-4.20-3.3.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-3.40.1-3.7.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64"
},
"product_reference": "mozilla-nss-3.40.1-3.7.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-3.40.1-3.7.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le"
},
"product_reference": "mozilla-nss-3.40.1-3.7.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-3.40.1-3.7.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x"
},
"product_reference": "mozilla-nss-3.40.1-3.7.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-3.40.1-3.7.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64"
},
"product_reference": "mozilla-nss-3.40.1-3.7.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-32bit-3.40.1-3.7.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64"
},
"product_reference": "mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-certs-3.40.1-3.7.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64"
},
"product_reference": "mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-certs-3.40.1-3.7.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le"
},
"product_reference": "mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-certs-3.40.1-3.7.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x"
},
"product_reference": "mozilla-nss-certs-3.40.1-3.7.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-certs-3.40.1-3.7.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64"
},
"product_reference": "mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64"
},
"product_reference": "mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-devel-3.40.1-3.7.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64"
},
"product_reference": "mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-devel-3.40.1-3.7.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le"
},
"product_reference": "mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-devel-3.40.1-3.7.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x"
},
"product_reference": "mozilla-nss-devel-3.40.1-3.7.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-devel-3.40.1-3.7.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64"
},
"product_reference": "mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-sysinit-3.40.1-3.7.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64"
},
"product_reference": "mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le"
},
"product_reference": "mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-sysinit-3.40.1-3.7.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x"
},
"product_reference": "mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-sysinit-3.40.1-3.7.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64"
},
"product_reference": "mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-tools-3.40.1-3.7.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64"
},
"product_reference": "mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-tools-3.40.1-3.7.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le"
},
"product_reference": "mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-tools-3.40.1-3.7.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x"
},
"product_reference": "mozilla-nss-tools-3.40.1-3.7.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-tools-3.40.1-3.7.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64"
},
"product_reference": "mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.4.0-3.21.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64"
},
"product_reference": "MozillaFirefox-60.4.0-3.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.4.0-3.21.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le"
},
"product_reference": "MozillaFirefox-60.4.0-3.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.4.0-3.21.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x"
},
"product_reference": "MozillaFirefox-60.4.0-3.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.4.0-3.21.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64"
},
"product_reference": "MozillaFirefox-60.4.0-3.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.4.0-3.21.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64"
},
"product_reference": "MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.4.0-3.21.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le"
},
"product_reference": "MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.4.0-3.21.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x"
},
"product_reference": "MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.4.0-3.21.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64"
},
"product_reference": "MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.4.0-3.21.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64"
},
"product_reference": "MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.4.0-3.21.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x"
},
"product_reference": "MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-0495",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-0495"
}
],
"notes": [
{
"category": "general",
"text": "Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-0495",
"url": "https://www.suse.com/security/cve/CVE-2018-0495"
},
{
"category": "external",
"summary": "SUSE Bug 1097410 for CVE-2018-0495",
"url": "https://bugzilla.suse.com/1097410"
},
{
"category": "external",
"summary": "SUSE Bug 1121207 for CVE-2018-0495",
"url": "https://bugzilla.suse.com/1121207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-12-21T17:47:33Z",
"details": "moderate"
}
],
"title": "CVE-2018-0495"
},
{
"cve": "CVE-2018-12384",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12384"
}
],
"notes": [
{
"category": "general",
"text": "When handling a SSLv2-compatible ClientHello request, the server doesn\u0027t generate a new random value but sends an all-zero value instead. This results in full malleability of the ClientHello for SSLv2 used for TLS 1.2 in all versions prior to NSS 3.39. This does not impact TLS 1.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12384",
"url": "https://www.suse.com/security/cve/CVE-2018-12384"
},
{
"category": "external",
"summary": "SUSE Bug 1106873 for CVE-2018-12384",
"url": "https://bugzilla.suse.com/1106873"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-12384",
"url": "https://bugzilla.suse.com/1119105"
},
{
"category": "external",
"summary": "SUSE Bug 1121207 for CVE-2018-12384",
"url": "https://bugzilla.suse.com/1121207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-12-21T17:47:33Z",
"details": "moderate"
}
],
"title": "CVE-2018-12384"
},
{
"cve": "CVE-2018-12404",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12404"
}
],
"notes": [
{
"category": "general",
"text": "A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12404",
"url": "https://www.suse.com/security/cve/CVE-2018-12404"
},
{
"category": "external",
"summary": "SUSE Bug 1119069 for CVE-2018-12404",
"url": "https://bugzilla.suse.com/1119069"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-12404",
"url": "https://bugzilla.suse.com/1119105"
},
{
"category": "external",
"summary": "SUSE Bug 1121207 for CVE-2018-12404",
"url": "https://bugzilla.suse.com/1121207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-12-21T17:47:33Z",
"details": "moderate"
}
],
"title": "CVE-2018-12404"
},
{
"cve": "CVE-2018-12405",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12405"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.4, Firefox ESR \u003c 60.4, and Firefox \u003c 64.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12405",
"url": "https://www.suse.com/security/cve/CVE-2018-12405"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-12405",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-12405",
"url": "https://bugzilla.suse.com/1119105"
},
{
"category": "external",
"summary": "SUSE Bug 1121207 for CVE-2018-12405",
"url": "https://bugzilla.suse.com/1121207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-12-21T17:47:33Z",
"details": "low"
}
],
"title": "CVE-2018-12405"
},
{
"cve": "CVE-2018-17466",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17466"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17466",
"url": "https://www.suse.com/security/cve/CVE-2018-17466"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17466",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17466",
"url": "https://bugzilla.suse.com/1119105"
},
{
"category": "external",
"summary": "SUSE Bug 1121207 for CVE-2018-17466",
"url": "https://bugzilla.suse.com/1121207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-12-21T17:47:33Z",
"details": "low"
}
],
"title": "CVE-2018-17466"
},
{
"cve": "CVE-2018-18492",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18492"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.4, Firefox ESR \u003c 60.4, and Firefox \u003c 64.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18492",
"url": "https://www.suse.com/security/cve/CVE-2018-18492"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-18492",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-18492",
"url": "https://bugzilla.suse.com/1119105"
},
{
"category": "external",
"summary": "SUSE Bug 1121207 for CVE-2018-18492",
"url": "https://bugzilla.suse.com/1121207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-12-21T17:47:33Z",
"details": "low"
}
],
"title": "CVE-2018-18492"
},
{
"cve": "CVE-2018-18493",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18493"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.4, Firefox ESR \u003c 60.4, and Firefox \u003c 64.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18493",
"url": "https://www.suse.com/security/cve/CVE-2018-18493"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-18493",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-18493",
"url": "https://bugzilla.suse.com/1119105"
},
{
"category": "external",
"summary": "SUSE Bug 1121207 for CVE-2018-18493",
"url": "https://bugzilla.suse.com/1121207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-12-21T17:47:33Z",
"details": "low"
}
],
"title": "CVE-2018-18493"
},
{
"cve": "CVE-2018-18494",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18494"
}
],
"notes": [
{
"category": "general",
"text": "A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Thunderbird \u003c 60.4, Firefox ESR \u003c 60.4, and Firefox \u003c 64.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18494",
"url": "https://www.suse.com/security/cve/CVE-2018-18494"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-18494",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-18494",
"url": "https://bugzilla.suse.com/1119105"
},
{
"category": "external",
"summary": "SUSE Bug 1121207 for CVE-2018-18494",
"url": "https://bugzilla.suse.com/1121207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-12-21T17:47:33Z",
"details": "low"
}
],
"title": "CVE-2018-18494"
},
{
"cve": "CVE-2018-18498",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18498"
}
],
"notes": [
{
"category": "general",
"text": "A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked value. This leads to a possible out-of-bounds write. This vulnerability affects Thunderbird \u003c 60.4, Firefox ESR \u003c 60.4, and Firefox \u003c 64.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18498",
"url": "https://www.suse.com/security/cve/CVE-2018-18498"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-18498",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-18498",
"url": "https://bugzilla.suse.com/1119105"
},
{
"category": "external",
"summary": "SUSE Bug 1121207 for CVE-2018-18498",
"url": "https://bugzilla.suse.com/1121207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libfreebl3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsoftokn3-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-32bit-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nspr-devel-4.20-3.3.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-certs-32bit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-devel-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-sysinit-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:mozilla-nss-tools-3.40.1-3.7.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.4.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.4.0-3.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-12-21T17:47:33Z",
"details": "low"
}
],
"title": "CVE-2018-18498"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…