<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for webkit2gtk3</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>openSUSE-SU-2019:1766-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2019-07-21T05:36:09Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2019-07-21T05:36:09Z</InitialReleaseDate>
    <CurrentReleaseDate>2019-07-21T05:36:09Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for webkit2gtk3</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for webkit2gtk3 to version 2.24.2 fixes the following issues:

Security issues fixed:

- CVE-2019-6237, CVE-2019-8571, CVE-2019-8583, CVE-2019-8584, CVE-2019-8586,
  CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596, CVE-2019-8597,
  CVE-2019-8601, CVE-2019-8607, CVE-2019-8608, CVE-2019-8609, CVE-2019-8610,
  CVE-2019-8615, CVE-2019-8611, CVE-2019-8619, CVE-2019-8622, CVE-2019-8623 (bsc#1135715).

This update was imported from the SUSE:SLE-15:Update update project.</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">openSUSE-2019-1766</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      <Description>E-Mail link for openSUSE-SU-2019:1766-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1133291</URL>
      <Description>SUSE Bug 1133291</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1135715</URL>
      <Description>SUSE Bug 1135715</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-6237/</URL>
      <Description>SUSE CVE CVE-2019-6237 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8571/</URL>
      <Description>SUSE CVE CVE-2019-8571 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8583/</URL>
      <Description>SUSE CVE CVE-2019-8583 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8584/</URL>
      <Description>SUSE CVE CVE-2019-8584 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8586/</URL>
      <Description>SUSE CVE CVE-2019-8586 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8587/</URL>
      <Description>SUSE CVE CVE-2019-8587 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8594/</URL>
      <Description>SUSE CVE CVE-2019-8594 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8595/</URL>
      <Description>SUSE CVE CVE-2019-8595 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8596/</URL>
      <Description>SUSE CVE CVE-2019-8596 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8597/</URL>
      <Description>SUSE CVE CVE-2019-8597 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8601/</URL>
      <Description>SUSE CVE CVE-2019-8601 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8607/</URL>
      <Description>SUSE CVE CVE-2019-8607 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8608/</URL>
      <Description>SUSE CVE CVE-2019-8608 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8609/</URL>
      <Description>SUSE CVE CVE-2019-8609 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8610/</URL>
      <Description>SUSE CVE CVE-2019-8610 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8611/</URL>
      <Description>SUSE CVE CVE-2019-8611 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8615/</URL>
      <Description>SUSE CVE CVE-2019-8615 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8619/</URL>
      <Description>SUSE CVE CVE-2019-8619 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8622/</URL>
      <Description>SUSE CVE CVE-2019-8622 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-8623/</URL>
      <Description>SUSE CVE CVE-2019-8623 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="openSUSE Leap 15.0">
      <Branch Type="Product Name" Name="openSUSE Leap 15.0">
        <FullProductName ProductID="openSUSE Leap 15.0" CPE="cpe:/o:opensuse:leap:15.0">openSUSE Leap 15.0</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="openSUSE Leap 15.1">
      <Branch Type="Product Name" Name="openSUSE Leap 15.1">
        <FullProductName ProductID="openSUSE Leap 15.1" CPE="cpe:/o:opensuse:leap:15.1">openSUSE Leap 15.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1">
      <FullProductName ProductID="libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1">libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1">
      <FullProductName ProductID="libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1">libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1">
      <FullProductName ProductID="libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1">libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1">
      <FullProductName ProductID="libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1">libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libwebkit2gtk3-lang-2.24.2-lp151.2.3.1">
      <FullProductName ProductID="libwebkit2gtk3-lang-2.24.2-lp151.2.3.1">libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1">
      <FullProductName ProductID="typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1">typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1">
      <FullProductName ProductID="typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1">typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1">
      <FullProductName ProductID="typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1">typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="webkit-jsc-4-2.24.2-lp151.2.3.1">
      <FullProductName ProductID="webkit-jsc-4-2.24.2-lp151.2.3.1">webkit-jsc-4-2.24.2-lp151.2.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1">
      <FullProductName ProductID="webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1">webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="webkit2gtk3-devel-2.24.2-lp151.2.3.1">
      <FullProductName ProductID="webkit2gtk3-devel-2.24.2-lp151.2.3.1">webkit2gtk3-devel-2.24.2-lp151.2.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1">
      <FullProductName ProductID="webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1">webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1">
      <FullProductName ProductID="webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1">webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</FullProductName>
    </Branch>
    <Relationship ProductReference="libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.0">
      <FullProductName ProductID="openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1">libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.0">
      <FullProductName ProductID="openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1">libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.0">
      <FullProductName ProductID="openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1">libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.0">
      <FullProductName ProductID="openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1">libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk3-lang-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.0">
      <FullProductName ProductID="openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1">libwebkit2gtk3-lang-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.0">
      <FullProductName ProductID="openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1">typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.0">
      <FullProductName ProductID="openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1">typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.0">
      <FullProductName ProductID="openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1">typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit-jsc-4-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.0">
      <FullProductName ProductID="openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1">webkit-jsc-4-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.0">
      <FullProductName ProductID="openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1">webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk3-devel-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.0">
      <FullProductName ProductID="openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1">webkit2gtk3-devel-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.0">
      <FullProductName ProductID="openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1">webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.0">
      <FullProductName ProductID="openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1">webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.1">
      <FullProductName ProductID="openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1">libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.1">
      <FullProductName ProductID="openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1">libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.1">
      <FullProductName ProductID="openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1">libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.1">
      <FullProductName ProductID="openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1">libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk3-lang-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.1">
      <FullProductName ProductID="openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1">libwebkit2gtk3-lang-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.1">
      <FullProductName ProductID="openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1">typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.1">
      <FullProductName ProductID="openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1">typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.1">
      <FullProductName ProductID="openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1">typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit-jsc-4-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.1">
      <FullProductName ProductID="openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1">webkit-jsc-4-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.1">
      <FullProductName ProductID="openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1">webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk3-devel-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.1">
      <FullProductName ProductID="openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1">webkit2gtk3-devel-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.1">
      <FullProductName ProductID="openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1">webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.1">
      <FullProductName ProductID="openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1">webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1 as a component of openSUSE Leap 15.1</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-6237</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-6237.html</URL>
        <Description>CVE-2019-6237</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8571</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8571.html</URL>
        <Description>CVE-2019-8571</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8583</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8583.html</URL>
        <Description>CVE-2019-8583</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8584</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8584.html</URL>
        <Description>CVE-2019-8584</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8586</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8586.html</URL>
        <Description>CVE-2019-8586</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8587</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8587.html</URL>
        <Description>CVE-2019-8587</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8594</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8594.html</URL>
        <Description>CVE-2019-8594</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8595</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8595.html</URL>
        <Description>CVE-2019-8595</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8596</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8596.html</URL>
        <Description>CVE-2019-8596</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8597</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:N/A:N</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8597.html</URL>
        <Description>CVE-2019-8597</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8601</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8601.html</URL>
        <Description>CVE-2019-8601</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="12">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of process memory.</Note>
    </Notes>
    <CVE>CVE-2019-8607</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:N/A:N</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8607.html</URL>
        <Description>CVE-2019-8607</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="13">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8608</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8608.html</URL>
        <Description>CVE-2019-8608</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="14">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8609</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8609.html</URL>
        <Description>CVE-2019-8609</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="15">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8610</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8610.html</URL>
        <Description>CVE-2019-8610</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="16">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8611</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8611.html</URL>
        <Description>CVE-2019-8611</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="17">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8615</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:N/A:N</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8615.html</URL>
        <Description>CVE-2019-8615</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="18">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8619</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8619.html</URL>
        <Description>CVE-2019-8619</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="19">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8622</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8622.html</URL>
        <Description>CVE-2019-8622</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="20">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2019-8623</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.0:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:libwebkit2gtk3-lang-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit-jsc-4-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-devel-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1</ProductID>
        <ProductID>openSUSE Leap 15.1:webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL/#OQE4VHBLMH2J7F26YN2UPX2X5S3MOQCL</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-8623.html</URL>
        <Description>CVE-2019-8623</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1135715</URL>
        <Description>SUSE Bug 1135715</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
