<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for MozillaFirefox</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2021:2478-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2021-07-27T11:46:50Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2021-07-27T11:46:50Z</InitialReleaseDate>
    <CurrentReleaseDate>2021-07-27T11:46:50Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for MozillaFirefox</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 78.12.0 ESR

* Fixed: Various stability, functionality, and security fixes

MFSA 2021-29 (bsc#1188275)

* CVE-2021-29970: Use-after-free in accessibility features of a document
* CVE-2021-30547: Out of bounds write in ANGLE
* CVE-2021-29976: Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-2021-2478,SUSE-SLE-Product-HPC-15-2021-2478,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-2478,SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-2478,SUSE-SLE-Product-SLES-15-2021-2478,SUSE-SLE-Product-SLES-15-SP1-BCL-2021-2478,SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-2478,SUSE-SLE-Product-SLES_SAP-15-2021-2478,SUSE-SLE-Product-SLES_SAP-15-SP1-2021-2478,SUSE-SLE-Product-SUSE-Manager-Proxy-4.0-2021-2478,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.0-2021-2478,SUSE-SLE-Product-SUSE-Manager-Server-4.0-2021-2478,SUSE-Storage-6-2021-2478</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20212478-1/</URL>
      <Description>Link for SUSE-SU-2021:2478-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2021-July/009220.html</URL>
      <Description>E-Mail link for SUSE-SU-2021:2478-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1188275</URL>
      <Description>SUSE Bug 1188275</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-29970/</URL>
      <Description>SUSE CVE CVE-2021-29970 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-29976/</URL>
      <Description>SUSE CVE CVE-2021-29976 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-30547/</URL>
      <Description>SUSE CVE CVE-2021-30547 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Enterprise Storage 6">
      <Branch Type="Product Name" Name="SUSE Enterprise Storage 6">
        <FullProductName ProductID="SUSE Enterprise Storage 6" CPE="cpe:/o:suse:ses:6">SUSE Enterprise Storage 6</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS">
        <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS" CPE="cpe:/o:suse:sle_hpc-espos:15:sp1">SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS" CPE="cpe:/o:suse:sle_hpc-ltss:15:sp1">SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15-ESPOS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Performance Computing 15-ESPOS">
        <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-ESPOS" CPE="cpe:/o:suse:sle_hpc-espos:15">SUSE Linux Enterprise High Performance Computing 15-ESPOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Performance Computing 15-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-LTSS" CPE="cpe:/o:suse:sle_hpc-ltss:15">SUSE Linux Enterprise High Performance Computing 15-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15 SP1-BCL">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15 SP1-BCL">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-BCL" CPE="cpe:/o:suse:sles_bcl:15:sp1">SUSE Linux Enterprise Server 15 SP1-BCL</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15 SP1-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS" CPE="cpe:/o:suse:sles-ltss:15:sp1">SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15-LTSS" CPE="cpe:/o:suse:sles-ltss:15">SUSE Linux Enterprise Server 15-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 15">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 15">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15" CPE="cpe:/o:suse:sles_sap:15">SUSE Linux Enterprise Server for SAP Applications 15</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1" CPE="cpe:/o:suse:sles_sap:15:sp1">SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Proxy 4.0">
      <Branch Type="Product Name" Name="SUSE Manager Proxy 4.0">
        <FullProductName ProductID="SUSE Manager Proxy 4.0" CPE="cpe:/o:suse:suse-manager-proxy:4.0">SUSE Manager Proxy 4.0</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Retail Branch Server 4.0">
      <Branch Type="Product Name" Name="SUSE Manager Retail Branch Server 4.0">
        <FullProductName ProductID="SUSE Manager Retail Branch Server 4.0" CPE="cpe:/o:suse:suse-manager-retail-branch-server:4.0">SUSE Manager Retail Branch Server 4.0</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Server 4.0">
      <Branch Type="Product Name" Name="SUSE Manager Server 4.0">
        <FullProductName ProductID="SUSE Manager Server 4.0" CPE="cpe:/o:suse:suse-manager-server:4.0">SUSE Manager Server 4.0</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-78.12.0-3.147.1">
      <FullProductName ProductID="MozillaFirefox-78.12.0-3.147.1">MozillaFirefox-78.12.0-3.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-branding-upstream-78.12.0-3.147.1">
      <FullProductName ProductID="MozillaFirefox-branding-upstream-78.12.0-3.147.1">MozillaFirefox-branding-upstream-78.12.0-3.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-buildsymbols-78.12.0-3.147.1">
      <FullProductName ProductID="MozillaFirefox-buildsymbols-78.12.0-3.147.1">MozillaFirefox-buildsymbols-78.12.0-3.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-devel-78.12.0-3.147.1">
      <FullProductName ProductID="MozillaFirefox-devel-78.12.0-3.147.1">MozillaFirefox-devel-78.12.0-3.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-translations-common-78.12.0-3.147.1">
      <FullProductName ProductID="MozillaFirefox-translations-common-78.12.0-3.147.1">MozillaFirefox-translations-common-78.12.0-3.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-translations-other-78.12.0-3.147.1">
      <FullProductName ProductID="MozillaFirefox-translations-other-78.12.0-3.147.1">MozillaFirefox-translations-other-78.12.0-3.147.1</FullProductName>
    </Branch>
    <Relationship ProductReference="MozillaFirefox-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:MozillaFirefox-78.12.0-3.147.1">MozillaFirefox-78.12.0-3.147.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:MozillaFirefox-devel-78.12.0-3.147.1">MozillaFirefox-devel-78.12.0-3.147.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:MozillaFirefox-translations-common-78.12.0-3.147.1">MozillaFirefox-translations-common-78.12.0-3.147.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:MozillaFirefox-translations-other-78.12.0-3.147.1">MozillaFirefox-translations-other-78.12.0-3.147.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:MozillaFirefox-78.12.0-3.147.1">MozillaFirefox-78.12.0-3.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:MozillaFirefox-devel-78.12.0-3.147.1">MozillaFirefox-devel-78.12.0-3.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:MozillaFirefox-translations-common-78.12.0-3.147.1">MozillaFirefox-translations-common-78.12.0-3.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:MozillaFirefox-translations-other-78.12.0-3.147.1">MozillaFirefox-translations-other-78.12.0-3.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-78.12.0-3.147.1">MozillaFirefox-78.12.0-3.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-devel-78.12.0-3.147.1">MozillaFirefox-devel-78.12.0-3.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-translations-common-78.12.0-3.147.1">MozillaFirefox-translations-common-78.12.0-3.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-translations-other-78.12.0-3.147.1">MozillaFirefox-translations-other-78.12.0-3.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-ESPOS:MozillaFirefox-78.12.0-3.147.1">MozillaFirefox-78.12.0-3.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-ESPOS:MozillaFirefox-devel-78.12.0-3.147.1">MozillaFirefox-devel-78.12.0-3.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-ESPOS:MozillaFirefox-translations-common-78.12.0-3.147.1">MozillaFirefox-translations-common-78.12.0-3.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-ESPOS:MozillaFirefox-translations-other-78.12.0-3.147.1">MozillaFirefox-translations-other-78.12.0-3.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-78.12.0-3.147.1">MozillaFirefox-78.12.0-3.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-devel-78.12.0-3.147.1">MozillaFirefox-devel-78.12.0-3.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-translations-common-78.12.0-3.147.1">MozillaFirefox-translations-common-78.12.0-3.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-translations-other-78.12.0-3.147.1">MozillaFirefox-translations-other-78.12.0-3.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-BCL:MozillaFirefox-78.12.0-3.147.1">MozillaFirefox-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-BCL:MozillaFirefox-devel-78.12.0-3.147.1">MozillaFirefox-devel-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-BCL:MozillaFirefox-translations-common-78.12.0-3.147.1">MozillaFirefox-translations-common-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-BCL:MozillaFirefox-translations-other-78.12.0-3.147.1">MozillaFirefox-translations-other-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-78.12.0-3.147.1">MozillaFirefox-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-devel-78.12.0-3.147.1">MozillaFirefox-devel-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-translations-common-78.12.0-3.147.1">MozillaFirefox-translations-common-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-translations-other-78.12.0-3.147.1">MozillaFirefox-translations-other-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-78.12.0-3.147.1">MozillaFirefox-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-devel-78.12.0-3.147.1">MozillaFirefox-devel-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-translations-common-78.12.0-3.147.1">MozillaFirefox-translations-common-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-translations-other-78.12.0-3.147.1">MozillaFirefox-translations-other-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-78.12.0-3.147.1">MozillaFirefox-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-devel-78.12.0-3.147.1">MozillaFirefox-devel-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-translations-common-78.12.0-3.147.1">MozillaFirefox-translations-common-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-translations-other-78.12.0-3.147.1">MozillaFirefox-translations-other-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-78.12.0-3.147.1">MozillaFirefox-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-devel-78.12.0-3.147.1">MozillaFirefox-devel-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-translations-common-78.12.0-3.147.1">MozillaFirefox-translations-common-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-translations-other-78.12.0-3.147.1">MozillaFirefox-translations-other-78.12.0-3.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy 4.0">
      <FullProductName ProductID="SUSE Manager Proxy 4.0:MozillaFirefox-78.12.0-3.147.1">MozillaFirefox-78.12.0-3.147.1 as a component of SUSE Manager Proxy 4.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy 4.0">
      <FullProductName ProductID="SUSE Manager Proxy 4.0:MozillaFirefox-devel-78.12.0-3.147.1">MozillaFirefox-devel-78.12.0-3.147.1 as a component of SUSE Manager Proxy 4.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy 4.0">
      <FullProductName ProductID="SUSE Manager Proxy 4.0:MozillaFirefox-translations-common-78.12.0-3.147.1">MozillaFirefox-translations-common-78.12.0-3.147.1 as a component of SUSE Manager Proxy 4.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy 4.0">
      <FullProductName ProductID="SUSE Manager Proxy 4.0:MozillaFirefox-translations-other-78.12.0-3.147.1">MozillaFirefox-translations-other-78.12.0-3.147.1 as a component of SUSE Manager Proxy 4.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Retail Branch Server 4.0">
      <FullProductName ProductID="SUSE Manager Retail Branch Server 4.0:MozillaFirefox-78.12.0-3.147.1">MozillaFirefox-78.12.0-3.147.1 as a component of SUSE Manager Retail Branch Server 4.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Retail Branch Server 4.0">
      <FullProductName ProductID="SUSE Manager Retail Branch Server 4.0:MozillaFirefox-devel-78.12.0-3.147.1">MozillaFirefox-devel-78.12.0-3.147.1 as a component of SUSE Manager Retail Branch Server 4.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Retail Branch Server 4.0">
      <FullProductName ProductID="SUSE Manager Retail Branch Server 4.0:MozillaFirefox-translations-common-78.12.0-3.147.1">MozillaFirefox-translations-common-78.12.0-3.147.1 as a component of SUSE Manager Retail Branch Server 4.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Retail Branch Server 4.0">
      <FullProductName ProductID="SUSE Manager Retail Branch Server 4.0:MozillaFirefox-translations-other-78.12.0-3.147.1">MozillaFirefox-translations-other-78.12.0-3.147.1 as a component of SUSE Manager Retail Branch Server 4.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 4.0">
      <FullProductName ProductID="SUSE Manager Server 4.0:MozillaFirefox-78.12.0-3.147.1">MozillaFirefox-78.12.0-3.147.1 as a component of SUSE Manager Server 4.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 4.0">
      <FullProductName ProductID="SUSE Manager Server 4.0:MozillaFirefox-devel-78.12.0-3.147.1">MozillaFirefox-devel-78.12.0-3.147.1 as a component of SUSE Manager Server 4.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 4.0">
      <FullProductName ProductID="SUSE Manager Server 4.0:MozillaFirefox-translations-common-78.12.0-3.147.1">MozillaFirefox-translations-common-78.12.0-3.147.1 as a component of SUSE Manager Server 4.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other-78.12.0-3.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 4.0">
      <FullProductName ProductID="SUSE Manager Server 4.0:MozillaFirefox-translations-other-78.12.0-3.147.1">MozillaFirefox-translations-other-78.12.0-3.147.1 as a component of SUSE Manager Server 4.0</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. *This bug could only be triggered when accessibility was enabled.*. This vulnerability affects Thunderbird &lt; 78.12, Firefox ESR &lt; 78.12, and Firefox &lt; 90.</Note>
    </Notes>
    <CVE>CVE-2021-29970</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 6:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-ESPOS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-ESPOS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-ESPOS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-ESPOS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-BCL:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-BCL:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-BCL:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-BCL:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.0:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.0:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.0:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.0:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.0:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.0:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.0:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.0:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Server 4.0:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Server 4.0:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Server 4.0:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Server 4.0:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>5.1</BaseScoreV2>
        <VectorV2>AV:N/AC:H/Au:N/C:P/I:P/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>8.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20212478-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-29970.html</URL>
        <Description>CVE-2021-29970</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1188275</URL>
        <Description>SUSE Bug 1188275</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 78.12, Firefox ESR &lt; 78.12, and Firefox &lt; 90.</Note>
    </Notes>
    <CVE>CVE-2021-29976</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 6:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-ESPOS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-ESPOS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-ESPOS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-ESPOS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-BCL:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-BCL:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-BCL:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-BCL:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.0:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.0:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.0:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.0:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.0:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.0:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.0:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.0:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Server 4.0:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Server 4.0:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Server 4.0:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Server 4.0:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.8</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:P/I:P/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>8.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20212478-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-29976.html</URL>
        <Description>CVE-2021-29976</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1188275</URL>
        <Description>SUSE Bug 1188275</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2021-30547</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 6:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-ESPOS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-ESPOS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-ESPOS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-ESPOS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-BCL:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-BCL:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-BCL:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-BCL:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.0:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.0:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.0:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.0:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.0:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.0:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.0:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.0:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Server 4.0:MozillaFirefox-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Server 4.0:MozillaFirefox-devel-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Server 4.0:MozillaFirefox-translations-common-78.12.0-3.147.1</ProductID>
        <ProductID>SUSE Manager Server 4.0:MozillaFirefox-translations-other-78.12.0-3.147.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.8</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:P/I:P/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>8.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20212478-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-30547.html</URL>
        <Description>CVE-2021-30547</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1187141</URL>
        <Description>SUSE Bug 1187141</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1188275</URL>
        <Description>SUSE Bug 1188275</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
