Security update for MozillaFirefox SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:0374-1 Final 1 1 2018-02-06T10:47:56Z current 2018-02-06T10:47:56Z 2018-02-06T10:47:56Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for MozillaFirefox This update for MozillaFirefox to version 52.6 several issues. These security issues were fixed: - CVE-2018-5091: Use-after-free with DTMF timers (bsc#1077291). - CVE-2018-5095: Integer overflow in Skia library during edge builder allocation (bsc#1077291). - CVE-2018-5096: Use-after-free while editing form elements (bsc#1077291). - CVE-2018-5097: Use-after-free when source document is manipulated during XSLT (bsc#1077291). - CVE-2018-5098: Use-after-free while manipulating form input elements (bsc#1077291). - CVE-2018-5099: Use-after-free with widget listener (bsc#1077291). - CVE-2018-5104: Use-after-free during font face manipulation (bsc#1077291). - CVE-2018-5089: Fixed several memory safety bugs (bsc#1077291). - CVE-2018-5117: URL spoofing with right-to-left text aligned left-to-right (bsc#1077291). - CVE-2018-5102: Use-after-free in HTML media elements (bsc#1077291). - CVE-2018-5103: Use-after-free during mouse event handling (bsc#1077291). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-OpenStack-Cloud-6-2018-263,SUSE-SLE-DESKTOP-12-SP2-2018-263,SUSE-SLE-DESKTOP-12-SP3-2018-263,SUSE-SLE-RPI-12-SP2-2018-263,SUSE-SLE-SAP-12-SP1-2018-263,SUSE-SLE-SDK-12-SP2-2018-263,SUSE-SLE-SDK-12-SP3-2018-263,SUSE-SLE-SERVER-12-2018-263,SUSE-SLE-SERVER-12-SP1-2018-263,SUSE-SLE-SERVER-12-SP2-2018-263,SUSE-SLE-SERVER-12-SP3-2018-263 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20180374-1/ Link for SUSE-SU-2018:0374-1 https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00007.html E-Mail link for SUSE-SU-2018:0374-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1077291 SUSE Bug 1077291 https://www.suse.com/security/cve/CVE-2018-5089/ SUSE CVE CVE-2018-5089 page https://www.suse.com/security/cve/CVE-2018-5091/ SUSE CVE CVE-2018-5091 page https://www.suse.com/security/cve/CVE-2018-5095/ SUSE CVE CVE-2018-5095 page https://www.suse.com/security/cve/CVE-2018-5096/ SUSE CVE CVE-2018-5096 page https://www.suse.com/security/cve/CVE-2018-5097/ SUSE CVE CVE-2018-5097 page https://www.suse.com/security/cve/CVE-2018-5098/ SUSE CVE CVE-2018-5098 page https://www.suse.com/security/cve/CVE-2018-5099/ SUSE CVE CVE-2018-5099 page https://www.suse.com/security/cve/CVE-2018-5102/ SUSE CVE CVE-2018-5102 page https://www.suse.com/security/cve/CVE-2018-5103/ SUSE CVE CVE-2018-5103 page https://www.suse.com/security/cve/CVE-2018-5104/ SUSE CVE CVE-2018-5104 page https://www.suse.com/security/cve/CVE-2018-5117/ SUSE CVE CVE-2018-5117 page SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE OpenStack Cloud 6 MozillaFirefox-52.6.0esr-109.13.1 MozillaFirefox-devel-52.6.0esr-109.13.1 MozillaFirefox-translations-52.6.0esr-109.13.1 MozillaFirefox-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 MozillaFirefox-translations-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 MozillaFirefox-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 MozillaFirefox-translations-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 MozillaFirefox-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS MozillaFirefox-devel-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS MozillaFirefox-translations-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS MozillaFirefox-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server 12 SP2 MozillaFirefox-translations-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server 12 SP2 MozillaFirefox-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server 12 SP3 MozillaFirefox-translations-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server 12 SP3 MozillaFirefox-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server 12-LTSS MozillaFirefox-devel-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server 12-LTSS MozillaFirefox-translations-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server 12-LTSS MozillaFirefox-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 MozillaFirefox-translations-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 MozillaFirefox-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 MozillaFirefox-devel-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 MozillaFirefox-translations-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 MozillaFirefox-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 MozillaFirefox-translations-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 MozillaFirefox-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 MozillaFirefox-translations-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 MozillaFirefox-devel-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 MozillaFirefox-devel-52.6.0esr-109.13.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 MozillaFirefox-52.6.0esr-109.13.1 as a component of SUSE OpenStack Cloud 6 MozillaFirefox-devel-52.6.0esr-109.13.1 as a component of SUSE OpenStack Cloud 6 MozillaFirefox-translations-52.6.0esr-109.13.1 as a component of SUSE OpenStack Cloud 6 Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5089 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.6.0esr-109.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180374-1/ https://www.suse.com/security/cve/CVE-2018-5089.html CVE-2018-5089 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Firefox < 58. CVE-2018-5091 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.6.0esr-109.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180374-1/ https://www.suse.com/security/cve/CVE-2018-5091.html CVE-2018-5091 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5095 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.6.0esr-109.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180374-1/ https://www.suse.com/security/cve/CVE-2018-5095.html CVE-2018-5095 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Thunderbird < 52.6. CVE-2018-5096 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.6.0esr-109.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180374-1/ https://www.suse.com/security/cve/CVE-2018-5096.html CVE-2018-5096 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content during the transformation. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5097 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.6.0esr-109.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180374-1/ https://www.suse.com/security/cve/CVE-2018-5097.html CVE-2018-5097 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5098 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.6.0esr-109.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180374-1/ https://www.suse.com/security/cve/CVE-2018-5098.html CVE-2018-5098 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been freed, resulting in a potentially exploitable crash when these references are used. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5099 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.6.0esr-109.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180374-1/ https://www.suse.com/security/cve/CVE-2018-5099.html CVE-2018-5099 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5102 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.6.0esr-109.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180374-1/ https://www.suse.com/security/cve/CVE-2018-5102.html CVE-2018-5102 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5103 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.6.0esr-109.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180374-1/ https://www.suse.com/security/cve/CVE-2018-5103.html CVE-2018-5103 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5104 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.6.0esr-109.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180374-1/ https://www.suse.com/security/cve/CVE-2018-5104.html CVE-2018-5104 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the displayed URL. This issue could result in the wrong URL being displayed as a location, which can mislead users to believe they are on a different site than the one loaded. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5117 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-52.6.0esr-109.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-devel-52.6.0esr-109.13.1 SUSE OpenStack Cloud 6:MozillaFirefox-translations-52.6.0esr-109.13.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180374-1/ https://www.suse.com/security/cve/CVE-2018-5117.html CVE-2018-5117 https://bugzilla.suse.com/1077291 SUSE Bug 1077291