<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for webkit2gtk3</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2019:2428-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2019-09-23T07:28:20Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2019-09-23T07:28:20Z</InitialReleaseDate>
    <CurrentReleaseDate>2019-09-23T07:28:20Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for webkit2gtk3</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for webkit2gtk3 fixes the following issues:

Security issues fixed:

- CVE-2019-8673, CVE-2019-8678, CVE-2019-8686, CVE-2019-8683, CVE-2019-8671,
  CVE-2019-8595, CVE-2019-8684, CVE-2019-8681, CVE-2019-8615, CVE-2019-8689,
  CVE-2019-8680, CVE-2019-8672, CVE-2019-8676, CVE-2019-8666, CVE-2019-8644,
  CVE-2019-8658, CVE-2019-8690, CVE-2019-8688, CVE-2019-8649, CVE-2019-8679,
  CVE-2019-8687, CVE-2019-8669, CVE-2019-8677, CVE-2019-8607 (bsc#1148931).
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-2019-2428,SUSE-SLE-Module-Basesystem-15-2019-2428,SUSE-SLE-Module-Basesystem-15-SP1-2019-2428,SUSE-SLE-Module-Desktop-Applications-15-2019-2428,SUSE-SLE-Module-Desktop-Applications-15-SP1-2019-2428,SUSE-SLE-Module-Development-Tools-OBS-15-2019-2428,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2428</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      <Description>Link for SUSE-SU-2019:2428-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html</URL>
      <Description>E-Mail link for SUSE-SU-2019:2428-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1148931</URL>
      <Description>SUSE Bug 1148931</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8595/</URL>
      <Description>SUSE CVE CVE-2019-8595 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8607/</URL>
      <Description>SUSE CVE CVE-2019-8607 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8615/</URL>
      <Description>SUSE CVE CVE-2019-8615 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8644/</URL>
      <Description>SUSE CVE CVE-2019-8644 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8649/</URL>
      <Description>SUSE CVE CVE-2019-8649 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8658/</URL>
      <Description>SUSE CVE CVE-2019-8658 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8666/</URL>
      <Description>SUSE CVE CVE-2019-8666 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8669/</URL>
      <Description>SUSE CVE CVE-2019-8669 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8671/</URL>
      <Description>SUSE CVE CVE-2019-8671 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8672/</URL>
      <Description>SUSE CVE CVE-2019-8672 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8673/</URL>
      <Description>SUSE CVE CVE-2019-8673 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8676/</URL>
      <Description>SUSE CVE CVE-2019-8676 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8677/</URL>
      <Description>SUSE CVE CVE-2019-8677 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8678/</URL>
      <Description>SUSE CVE CVE-2019-8678 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8679/</URL>
      <Description>SUSE CVE CVE-2019-8679 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8680/</URL>
      <Description>SUSE CVE CVE-2019-8680 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8681/</URL>
      <Description>SUSE CVE CVE-2019-8681 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8683/</URL>
      <Description>SUSE CVE CVE-2019-8683 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8684/</URL>
      <Description>SUSE CVE CVE-2019-8684 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8686/</URL>
      <Description>SUSE CVE CVE-2019-8686 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8687/</URL>
      <Description>SUSE CVE CVE-2019-8687 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8688/</URL>
      <Description>SUSE CVE CVE-2019-8688 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8689/</URL>
      <Description>SUSE CVE CVE-2019-8689 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8690/</URL>
      <Description>SUSE CVE CVE-2019-8690 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Basesystem 15">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Basesystem 15">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15" CPE="cpe:/o:suse:sle-module-basesystem:15">SUSE Linux Enterprise Module for Basesystem 15</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Basesystem 15 SP1">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1" CPE="cpe:/o:suse:sle-module-basesystem:15:sp1">SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Desktop Applications 15">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Desktop Applications 15">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15" CPE="cpe:/o:suse:sle-module-desktop-applications:15">SUSE Linux Enterprise Module for Desktop Applications 15</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Desktop Applications 15 SP1">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Desktop Applications 15 SP1">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP1" CPE="cpe:/o:suse:sle-module-desktop-applications:15:sp1">SUSE Linux Enterprise Module for Desktop Applications 15 SP1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="libjavascriptcoregtk-4_0-18-2.24.4-3.31.1">
      <FullProductName ProductID="libjavascriptcoregtk-4_0-18-2.24.4-3.31.1">libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libjavascriptcoregtk-4_0-18-32bit-2.24.4-3.31.1">
      <FullProductName ProductID="libjavascriptcoregtk-4_0-18-32bit-2.24.4-3.31.1">libjavascriptcoregtk-4_0-18-32bit-2.24.4-3.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libjavascriptcoregtk-4_0-18-64bit-2.24.4-3.31.1">
      <FullProductName ProductID="libjavascriptcoregtk-4_0-18-64bit-2.24.4-3.31.1">libjavascriptcoregtk-4_0-18-64bit-2.24.4-3.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libwebkit2gtk-4_0-37-2.24.4-3.31.1">
      <FullProductName ProductID="libwebkit2gtk-4_0-37-2.24.4-3.31.1">libwebkit2gtk-4_0-37-2.24.4-3.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libwebkit2gtk-4_0-37-32bit-2.24.4-3.31.1">
      <FullProductName ProductID="libwebkit2gtk-4_0-37-32bit-2.24.4-3.31.1">libwebkit2gtk-4_0-37-32bit-2.24.4-3.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libwebkit2gtk-4_0-37-64bit-2.24.4-3.31.1">
      <FullProductName ProductID="libwebkit2gtk-4_0-37-64bit-2.24.4-3.31.1">libwebkit2gtk-4_0-37-64bit-2.24.4-3.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libwebkit2gtk3-lang-2.24.4-3.31.1">
      <FullProductName ProductID="libwebkit2gtk3-lang-2.24.4-3.31.1">libwebkit2gtk3-lang-2.24.4-3.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1">
      <FullProductName ProductID="typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1">typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-WebKit2-4_0-2.24.4-3.31.1">
      <FullProductName ProductID="typelib-1_0-WebKit2-4_0-2.24.4-3.31.1">typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1">
      <FullProductName ProductID="typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1">typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="webkit-jsc-4-2.24.4-3.31.1">
      <FullProductName ProductID="webkit-jsc-4-2.24.4-3.31.1">webkit-jsc-4-2.24.4-3.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1">
      <FullProductName ProductID="webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1">webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="webkit2gtk3-devel-2.24.4-3.31.1">
      <FullProductName ProductID="webkit2gtk3-devel-2.24.4-3.31.1">webkit2gtk3-devel-2.24.4-3.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="webkit2gtk3-minibrowser-2.24.4-3.31.1">
      <FullProductName ProductID="webkit2gtk3-minibrowser-2.24.4-3.31.1">webkit2gtk3-minibrowser-2.24.4-3.31.1</FullProductName>
    </Branch>
    <Relationship ProductReference="libjavascriptcoregtk-4_0-18-2.24.4-3.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1">libjavascriptcoregtk-4_0-18-2.24.4-3.31.1 as a component of SUSE Linux Enterprise Module for Basesystem 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk-4_0-37-2.24.4-3.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1">libwebkit2gtk-4_0-37-2.24.4-3.31.1 as a component of SUSE Linux Enterprise Module for Basesystem 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk3-lang-2.24.4-3.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1">libwebkit2gtk3-lang-2.24.4-3.31.1 as a component of SUSE Linux Enterprise Module for Basesystem 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1">webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1 as a component of SUSE Linux Enterprise Module for Basesystem 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="libjavascriptcoregtk-4_0-18-2.24.4-3.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1">libjavascriptcoregtk-4_0-18-2.24.4-3.31.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk-4_0-37-2.24.4-3.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1">libwebkit2gtk-4_0-37-2.24.4-3.31.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk3-lang-2.24.4-3.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1">libwebkit2gtk3-lang-2.24.4-3.31.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1">webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1">typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-WebKit2-4_0-2.24.4-3.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1">typelib-1_0-WebKit2-4_0-2.24.4-3.31.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1">typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk3-devel-2.24.4-3.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1">webkit2gtk3-devel-2.24.4-3.31.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1">typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-WebKit2-4_0-2.24.4-3.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1">typelib-1_0-WebKit2-4_0-2.24.4-3.31.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1">typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk3-devel-2.24.4-3.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1">webkit2gtk3-devel-2.24.4-3.31.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8595</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8595.html</URL>
        <Description>CVE-2019-8595</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of process memory.</Note>
    </Notes>
    <CVE>CVE-2019-8607</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8607.html</URL>
        <Description>CVE-2019-8607</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8615</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8615.html</URL>
        <Description>CVE-2019-8615</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8644</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8644.html</URL>
        <Description>CVE-2019-8644</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.</Note>
    </Notes>
    <CVE>CVE-2019-8649</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8649.html</URL>
        <Description>CVE-2019-8649</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A logic issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.</Note>
    </Notes>
    <CVE>CVE-2019-8658</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8658.html</URL>
        <Description>CVE-2019-8658</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8666</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8666.html</URL>
        <Description>CVE-2019-8666</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8669</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8669.html</URL>
        <Description>CVE-2019-8669</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8671</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8671.html</URL>
        <Description>CVE-2019-8671</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8672</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8672.html</URL>
        <Description>CVE-2019-8672</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8673</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8673.html</URL>
        <Description>CVE-2019-8673</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="12">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8676</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8676.html</URL>
        <Description>CVE-2019-8676</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="13">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8677</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8677.html</URL>
        <Description>CVE-2019-8677</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="14">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8678</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8678.html</URL>
        <Description>CVE-2019-8678</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="15">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8679</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8679.html</URL>
        <Description>CVE-2019-8679</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="16">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8680</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8680.html</URL>
        <Description>CVE-2019-8680</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="17">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8681</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8681.html</URL>
        <Description>CVE-2019-8681</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="18">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8683</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8683.html</URL>
        <Description>CVE-2019-8683</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="19">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8684</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8684.html</URL>
        <Description>CVE-2019-8684</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="20">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8686</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8686.html</URL>
        <Description>CVE-2019-8686</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="21">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8687</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8687.html</URL>
        <Description>CVE-2019-8687</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="22">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8688</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8688.html</URL>
        <Description>CVE-2019-8688</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="23">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8689</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8689.html</URL>
        <Description>CVE-2019-8689</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="24">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.</Note>
    </Notes>
    <CVE>CVE-2019-8690</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libjavascriptcoregtk-4_0-18-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk-4_0-37-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:libwebkit2gtk3-lang-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP1:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15:webkit2gtk3-devel-2.24.4-3.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20192428-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8690.html</URL>
        <Description>CVE-2019-8690</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1148931</URL>
        <Description>SUSE Bug 1148931</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
