<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for MozillaFirefox</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2021:3993-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2021-12-10T14:04:20Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2021-12-10T14:04:20Z</InitialReleaseDate>
    <CurrentReleaseDate>2021-12-10T14:04:20Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for MozillaFirefox</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for MozillaFirefox fixes the following issues:

Update to Extended Support Release 91.4.0 (bsc#1193485):

- CVE-2021-43536: URL leakage when navigating while executing asynchronous function
- CVE-2021-43537: Heap buffer overflow when using structured clone
- CVE-2021-43538: Missing fullscreen and pointer lock notification when requesting both
- CVE-2021-43539: GC rooting failure when calling wasm instance methods
- CVE-2021-43541: External protocol handler parameters were unescaped
- CVE-2021-43542: XMLHttpRequest error codes could have leaked the existence of an external protocol handler
- CVE-2021-43543: Bypass of CSP sandbox directive when embedding
- CVE-2021-43545: Denial of Service when using the Location API in a loop
- CVE-2021-43546: Cursor spoofing could overlay user interface when native cursor is zoomed
- Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4
- Removed x-scheme-handler/ftp from MozillaFirefox.desktop (bsc#1193321)
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2021-3993,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2021-3993,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2021-3993,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2021-3993,Image SLES15-SP4-SAP-Azure-LI-BYOS-2021-3993,Image SLES15-SP4-SAP-Azure-LI-BYOS-Production-2021-3993,Image SLES15-SP4-SAP-Azure-VLI-BYOS-2021-3993,Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production-2021-3993,Image SLES15-SP5-SAP-Azure-LI-BYOS-2021-3993,Image SLES15-SP5-SAP-Azure-LI-BYOS-Production-2021-3993,Image SLES15-SP5-SAP-Azure-VLI-BYOS-2021-3993,Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production-2021-3993,SUSE-2021-3993,SUSE-SLE-Module-Desktop-Applications-15-SP2-2021-3993,SUSE-SLE-Module-Desktop-Applications-15-SP3-2021-3993</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213993-1/</URL>
      <Description>Link for SUSE-SU-2021:3993-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2021-December/009878.html</URL>
      <Description>E-Mail link for SUSE-SU-2021:3993-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1193321</URL>
      <Description>SUSE Bug 1193321</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1193485</URL>
      <Description>SUSE Bug 1193485</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-43536/</URL>
      <Description>SUSE CVE CVE-2021-43536 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-43537/</URL>
      <Description>SUSE CVE CVE-2021-43537 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-43538/</URL>
      <Description>SUSE CVE CVE-2021-43538 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-43539/</URL>
      <Description>SUSE CVE CVE-2021-43539 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-43541/</URL>
      <Description>SUSE CVE CVE-2021-43541 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-43542/</URL>
      <Description>SUSE CVE CVE-2021-43542 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-43543/</URL>
      <Description>SUSE CVE CVE-2021-43543 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-43545/</URL>
      <Description>SUSE CVE CVE-2021-43545 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-43546/</URL>
      <Description>SUSE CVE CVE-2021-43546 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="Image SLES15-SP2-SAP-Azure-LI-BYOS-Production">
      <Branch Type="Product Name" Name="Image SLES15-SP2-SAP-Azure-LI-BYOS-Production">
        <FullProductName ProductID="Image SLES15-SP2-SAP-Azure-LI-BYOS-Production">Image SLES15-SP2-SAP-Azure-LI-BYOS-Production</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production">
      <Branch Type="Product Name" Name="Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production">
        <FullProductName ProductID="Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production">Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP3-SAP-Azure-LI-BYOS-Production">
      <Branch Type="Product Name" Name="Image SLES15-SP3-SAP-Azure-LI-BYOS-Production">
        <FullProductName ProductID="Image SLES15-SP3-SAP-Azure-LI-BYOS-Production">Image SLES15-SP3-SAP-Azure-LI-BYOS-Production</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production">
      <Branch Type="Product Name" Name="Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production">
        <FullProductName ProductID="Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production">Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-SAP-Azure-LI-BYOS">
      <Branch Type="Product Name" Name="Image SLES15-SP4-SAP-Azure-LI-BYOS">
        <FullProductName ProductID="Image SLES15-SP4-SAP-Azure-LI-BYOS">Image SLES15-SP4-SAP-Azure-LI-BYOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-SAP-Azure-LI-BYOS-Production">
      <Branch Type="Product Name" Name="Image SLES15-SP4-SAP-Azure-LI-BYOS-Production">
        <FullProductName ProductID="Image SLES15-SP4-SAP-Azure-LI-BYOS-Production">Image SLES15-SP4-SAP-Azure-LI-BYOS-Production</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-SAP-Azure-VLI-BYOS">
      <Branch Type="Product Name" Name="Image SLES15-SP4-SAP-Azure-VLI-BYOS">
        <FullProductName ProductID="Image SLES15-SP4-SAP-Azure-VLI-BYOS">Image SLES15-SP4-SAP-Azure-VLI-BYOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production">
      <Branch Type="Product Name" Name="Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production">
        <FullProductName ProductID="Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production">Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP5-SAP-Azure-LI-BYOS">
      <Branch Type="Product Name" Name="Image SLES15-SP5-SAP-Azure-LI-BYOS">
        <FullProductName ProductID="Image SLES15-SP5-SAP-Azure-LI-BYOS">Image SLES15-SP5-SAP-Azure-LI-BYOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP5-SAP-Azure-LI-BYOS-Production">
      <Branch Type="Product Name" Name="Image SLES15-SP5-SAP-Azure-LI-BYOS-Production">
        <FullProductName ProductID="Image SLES15-SP5-SAP-Azure-LI-BYOS-Production">Image SLES15-SP5-SAP-Azure-LI-BYOS-Production</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP5-SAP-Azure-VLI-BYOS">
      <Branch Type="Product Name" Name="Image SLES15-SP5-SAP-Azure-VLI-BYOS">
        <FullProductName ProductID="Image SLES15-SP5-SAP-Azure-VLI-BYOS">Image SLES15-SP5-SAP-Azure-VLI-BYOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production">
      <Branch Type="Product Name" Name="Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production">
        <FullProductName ProductID="Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production">Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Desktop Applications 15 SP2">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Desktop Applications 15 SP2">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP2" CPE="cpe:/o:suse:sle-module-desktop-applications:15:sp2">SUSE Linux Enterprise Module for Desktop Applications 15 SP2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Desktop Applications 15 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Desktop Applications 15 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP3" CPE="cpe:/o:suse:sle-module-desktop-applications:15:sp3">SUSE Linux Enterprise Module for Desktop Applications 15 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-91.4.0-152.9.1">
      <FullProductName ProductID="MozillaFirefox-91.4.0-152.9.1">MozillaFirefox-91.4.0-152.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-branding-upstream-91.4.0-152.9.1">
      <FullProductName ProductID="MozillaFirefox-branding-upstream-91.4.0-152.9.1">MozillaFirefox-branding-upstream-91.4.0-152.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-devel-91.4.0-152.9.1">
      <FullProductName ProductID="MozillaFirefox-devel-91.4.0-152.9.1">MozillaFirefox-devel-91.4.0-152.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-translations-common-91.4.0-152.9.1">
      <FullProductName ProductID="MozillaFirefox-translations-common-91.4.0-152.9.1">MozillaFirefox-translations-common-91.4.0-152.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-translations-other-91.4.0-152.9.1">
      <FullProductName ProductID="MozillaFirefox-translations-other-91.4.0-152.9.1">MozillaFirefox-translations-other-91.4.0-152.9.1</FullProductName>
    </Branch>
    <Relationship ProductReference="MozillaFirefox-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP2-SAP-Azure-LI-BYOS-Production">
      <FullProductName ProductID="Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1">MozillaFirefox-91.4.0-152.9.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production">
      <FullProductName ProductID="Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1">MozillaFirefox-91.4.0-152.9.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP3-SAP-Azure-LI-BYOS-Production">
      <FullProductName ProductID="Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1">MozillaFirefox-91.4.0-152.9.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production">
      <FullProductName ProductID="Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1">MozillaFirefox-91.4.0-152.9.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-SAP-Azure-LI-BYOS">
      <FullProductName ProductID="Image SLES15-SP4-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1">MozillaFirefox-91.4.0-152.9.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-SAP-Azure-LI-BYOS-Production">
      <FullProductName ProductID="Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1">MozillaFirefox-91.4.0-152.9.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-SAP-Azure-VLI-BYOS">
      <FullProductName ProductID="Image SLES15-SP4-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1">MozillaFirefox-91.4.0-152.9.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production">
      <FullProductName ProductID="Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1">MozillaFirefox-91.4.0-152.9.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP5-SAP-Azure-LI-BYOS">
      <FullProductName ProductID="Image SLES15-SP5-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1">MozillaFirefox-91.4.0-152.9.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP5-SAP-Azure-LI-BYOS-Production">
      <FullProductName ProductID="Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1">MozillaFirefox-91.4.0-152.9.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP5-SAP-Azure-VLI-BYOS">
      <FullProductName ProductID="Image SLES15-SP5-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1">MozillaFirefox-91.4.0-152.9.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production">
      <FullProductName ProductID="Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1">MozillaFirefox-91.4.0-152.9.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-91.4.0-152.9.1">MozillaFirefox-91.4.0-152.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-devel-91.4.0-152.9.1">MozillaFirefox-devel-91.4.0-152.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-common-91.4.0-152.9.1">MozillaFirefox-translations-common-91.4.0-152.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-other-91.4.0-152.9.1">MozillaFirefox-translations-other-91.4.0-152.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-91.4.0-152.9.1">MozillaFirefox-91.4.0-152.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-devel-91.4.0-152.9.1">MozillaFirefox-devel-91.4.0-152.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-common-91.4.0-152.9.1">MozillaFirefox-translations-common-91.4.0-152.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other-91.4.0-152.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-other-91.4.0-152.9.1">MozillaFirefox-translations-other-91.4.0-152.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird &lt; 91.4.0, Firefox ESR &lt; 91.4.0, and Firefox &lt; 95.</Note>
    </Notes>
    <CVE>CVE-2021-43536</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.3</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:P/I:N/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213993-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-43536.html</URL>
        <Description>CVE-2021-43536</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1193485</URL>
        <Description>SUSE Bug 1193485</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 91.4.0, Firefox ESR &lt; 91.4.0, and Firefox &lt; 95.</Note>
    </Notes>
    <CVE>CVE-2021-43537</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.8</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:P/I:P/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213993-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-43537.html</URL>
        <Description>CVE-2021-43537</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1193485</URL>
        <Description>SUSE Bug 1193485</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks. This vulnerability affects Thunderbird &lt; 91.4.0, Firefox ESR &lt; 91.4.0, and Firefox &lt; 95.</Note>
    </Notes>
    <CVE>CVE-2021-43538</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.3</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:N/I:P/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213993-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-43538.html</URL>
        <Description>CVE-2021-43538</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1193485</URL>
        <Description>SUSE Bug 1193485</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 91.4.0, Firefox ESR &lt; 91.4.0, and Firefox &lt; 95.</Note>
    </Notes>
    <CVE>CVE-2021-43539</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.8</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:P/I:P/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213993-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-43539.html</URL>
        <Description>CVE-2021-43539</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1193485</URL>
        <Description>SUSE Bug 1193485</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped. This vulnerability affects Thunderbird &lt; 91.4.0, Firefox ESR &lt; 91.4.0, and Firefox &lt; 95.</Note>
    </Notes>
    <CVE>CVE-2021-43541</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.3</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:N/I:P/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.1</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213993-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-43541.html</URL>
        <Description>CVE-2021-43541</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1193485</URL>
        <Description>SUSE Bug 1193485</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading external protocols. This vulnerability affects Thunderbird &lt; 91.4.0, Firefox ESR &lt; 91.4.0, and Firefox &lt; 95.</Note>
    </Notes>
    <CVE>CVE-2021-43542</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.3</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:P/I:N/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.1</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213993-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-43542.html</URL>
        <Description>CVE-2021-43542</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1193485</URL>
        <Description>SUSE Bug 1193485</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additional content. This vulnerability affects Thunderbird &lt; 91.4.0, Firefox ESR &lt; 91.4.0, and Firefox &lt; 95.</Note>
    </Notes>
    <CVE>CVE-2021-43543</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.3</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:N/I:P/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.1</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213993-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-43543.html</URL>
        <Description>CVE-2021-43543</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1193485</URL>
        <Description>SUSE Bug 1193485</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thunderbird &lt; 91.4.0, Firefox ESR &lt; 91.4.0, and Firefox &lt; 95.</Note>
    </Notes>
    <CVE>CVE-2021-43545</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.3</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213993-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-43545.html</URL>
        <Description>CVE-2021-43545</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1193485</URL>
        <Description>SUSE Bug 1193485</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerability affects Thunderbird &lt; 91.4.0, Firefox ESR &lt; 91.4.0, and Firefox &lt; 95.</Note>
    </Notes>
    <CVE>CVE-2021-43546</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP4-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-LI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>Image SLES15-SP5-SAP-Azure-VLI-BYOS:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP2:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-devel-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-common-91.4.0-152.9.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP3:MozillaFirefox-translations-other-91.4.0-152.9.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.3</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:N/I:P/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213993-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-43546.html</URL>
        <Description>CVE-2021-43546</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1193485</URL>
        <Description>SUSE Bug 1193485</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
