<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update of chromium</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>openSUSE-SU-2017:0499-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2017-02-18T10:40:30Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2017-02-18T10:40:30Z</InitialReleaseDate>
    <CurrentReleaseDate>2017-02-18T10:40:30Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update of chromium</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">
Google chromium was updated to 56.0.2924.87:

* Various small fixes
* Disabled option to enable/disable plugins in the chrome://plugins

- Changed the build requirement of libavformat to library version
  57.41.100, as included in ffmpeg 3.1.1, as only this version
  properly supports the public AVStream API 'codecpar'. 

It also contains the version update to 56.0.2924.76  (bsc#1022049):
  - CVE-2017-5007: Universal XSS in Blink
  - CVE-2017-5006: Universal XSS in Blink
  - CVE-2017-5008: Universal XSS in Blink
  - CVE-2017-5010: Universal XSS in Blink
  - CVE-2017-5011: Unauthorised file access in Devtools
  - CVE-2017-5009: Out of bounds memory access in WebRTC
  - CVE-2017-5012: Heap overflow in V8
  - CVE-2017-5013: Address spoofing in Omnibox
  - CVE-2017-5014: Heap overflow in Skia
  - CVE-2017-5015: Address spoofing in Omnibox
  - CVE-2017-5019: Use after free in Renderer
  - CVE-2017-5016: UI spoofing in Blink
  - CVE-2017-5017: Uninitialised memory access in webm video
  - CVE-2017-5018: Universal XSS in chrome://apps
  - CVE-2017-5020: Universal XSS in chrome://downloads
  - CVE-2017-5021: Use after free in Extensions
  - CVE-2017-5022: Bypass of Content Security Policy in Blink
  - CVE-2017-5023: Type confusion in metrics
  - CVE-2017-5024: Heap overflow in FFmpeg
  - CVE-2017-5025: Heap overflow in FFmpeg
  - CVE-2017-5026: UI spoofing. Credit to Ronni Skansing

- Enable VAAPI hardware accelerated video decoding.

- Chromium 55.0.2883.87:
  * various fixes for crashes and specific wesites
  * update Google pinned certificates
  </Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      <Description>E-Mail link for openSUSE-SU-2017:0499-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="openSUSE Leap 42.1">
      <Branch Type="Product Name" Name="openSUSE Leap 42.1">
        <FullProductName ProductID="openSUSE Leap 42.1">openSUSE Leap 42.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="openSUSE Leap 42.2">
      <Branch Type="Product Name" Name="openSUSE Leap 42.2">
        <FullProductName ProductID="openSUSE Leap 42.2">openSUSE Leap 42.2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="chromedriver-56.0.2924.87-102.1">
      <FullProductName ProductID="chromedriver-56.0.2924.87-102.1">chromedriver-56.0.2924.87-102.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="chromium-56.0.2924.87-102.1">
      <FullProductName ProductID="chromium-56.0.2924.87-102.1">chromium-56.0.2924.87-102.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ffmpeg3-3.2.2-2.1">
      <FullProductName ProductID="ffmpeg3-3.2.2-2.1">ffmpeg3-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="harfbuzz-1.4.2-3.1">
      <FullProductName ProductID="harfbuzz-1.4.2-3.1">harfbuzz-1.4.2-3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="harfbuzz-devel-1.4.2-3.1">
      <FullProductName ProductID="harfbuzz-devel-1.4.2-3.1">harfbuzz-devel-1.4.2-3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="harfbuzz-tools-1.4.2-3.1">
      <FullProductName ProductID="harfbuzz-tools-1.4.2-3.1">harfbuzz-tools-1.4.2-3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavcodec-devel-3.2.2-2.1">
      <FullProductName ProductID="libavcodec-devel-3.2.2-2.1">libavcodec-devel-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavcodec57-3.2.2-2.1">
      <FullProductName ProductID="libavcodec57-3.2.2-2.1">libavcodec57-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavcodec57-32bit-3.2.2-2.1">
      <FullProductName ProductID="libavcodec57-32bit-3.2.2-2.1">libavcodec57-32bit-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavdevice-devel-3.2.2-2.1">
      <FullProductName ProductID="libavdevice-devel-3.2.2-2.1">libavdevice-devel-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavdevice57-3.2.2-2.1">
      <FullProductName ProductID="libavdevice57-3.2.2-2.1">libavdevice57-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavdevice57-32bit-3.2.2-2.1">
      <FullProductName ProductID="libavdevice57-32bit-3.2.2-2.1">libavdevice57-32bit-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavfilter-devel-3.2.2-2.1">
      <FullProductName ProductID="libavfilter-devel-3.2.2-2.1">libavfilter-devel-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavfilter6-3.2.2-2.1">
      <FullProductName ProductID="libavfilter6-3.2.2-2.1">libavfilter6-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavfilter6-32bit-3.2.2-2.1">
      <FullProductName ProductID="libavfilter6-32bit-3.2.2-2.1">libavfilter6-32bit-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavformat-devel-3.2.2-2.1">
      <FullProductName ProductID="libavformat-devel-3.2.2-2.1">libavformat-devel-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavformat57-3.2.2-2.1">
      <FullProductName ProductID="libavformat57-3.2.2-2.1">libavformat57-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavformat57-32bit-3.2.2-2.1">
      <FullProductName ProductID="libavformat57-32bit-3.2.2-2.1">libavformat57-32bit-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavresample-devel-3.2.2-2.1">
      <FullProductName ProductID="libavresample-devel-3.2.2-2.1">libavresample-devel-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavresample3-3.2.2-2.1">
      <FullProductName ProductID="libavresample3-3.2.2-2.1">libavresample3-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavresample3-32bit-3.2.2-2.1">
      <FullProductName ProductID="libavresample3-32bit-3.2.2-2.1">libavresample3-32bit-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavutil-devel-3.2.2-2.1">
      <FullProductName ProductID="libavutil-devel-3.2.2-2.1">libavutil-devel-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavutil55-3.2.2-2.1">
      <FullProductName ProductID="libavutil55-3.2.2-2.1">libavutil55-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavutil55-32bit-3.2.2-2.1">
      <FullProductName ProductID="libavutil55-32bit-3.2.2-2.1">libavutil55-32bit-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libharfbuzz-icu0-1.4.2-3.1">
      <FullProductName ProductID="libharfbuzz-icu0-1.4.2-3.1">libharfbuzz-icu0-1.4.2-3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libharfbuzz-icu0-32bit-1.4.2-3.1">
      <FullProductName ProductID="libharfbuzz-icu0-32bit-1.4.2-3.1">libharfbuzz-icu0-32bit-1.4.2-3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libharfbuzz0-1.4.2-3.1">
      <FullProductName ProductID="libharfbuzz0-1.4.2-3.1">libharfbuzz0-1.4.2-3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libharfbuzz0-32bit-1.4.2-3.1">
      <FullProductName ProductID="libharfbuzz0-32bit-1.4.2-3.1">libharfbuzz0-32bit-1.4.2-3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libpostproc-devel-3.2.2-2.1">
      <FullProductName ProductID="libpostproc-devel-3.2.2-2.1">libpostproc-devel-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libpostproc54-3.2.2-2.1">
      <FullProductName ProductID="libpostproc54-3.2.2-2.1">libpostproc54-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libpostproc54-32bit-3.2.2-2.1">
      <FullProductName ProductID="libpostproc54-32bit-3.2.2-2.1">libpostproc54-32bit-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libswresample-devel-3.2.2-2.1">
      <FullProductName ProductID="libswresample-devel-3.2.2-2.1">libswresample-devel-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libswresample2-3.2.2-2.1">
      <FullProductName ProductID="libswresample2-3.2.2-2.1">libswresample2-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libswresample2-32bit-3.2.2-2.1">
      <FullProductName ProductID="libswresample2-32bit-3.2.2-2.1">libswresample2-32bit-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libswscale-devel-3.2.2-2.1">
      <FullProductName ProductID="libswscale-devel-3.2.2-2.1">libswscale-devel-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libswscale4-3.2.2-2.1">
      <FullProductName ProductID="libswscale4-3.2.2-2.1">libswscale4-3.2.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libswscale4-32bit-3.2.2-2.1">
      <FullProductName ProductID="libswscale4-32bit-3.2.2-2.1">libswscale4-32bit-3.2.2-2.1</FullProductName>
    </Branch>
    <Relationship ProductReference="chromedriver-56.0.2924.87-102.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1">chromedriver-56.0.2924.87-102.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="chromium-56.0.2924.87-102.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:chromium-56.0.2924.87-102.1">chromium-56.0.2924.87-102.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="ffmpeg3-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1">ffmpeg3-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="harfbuzz-1.4.2-3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:harfbuzz-1.4.2-3.1">harfbuzz-1.4.2-3.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="harfbuzz-devel-1.4.2-3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1">harfbuzz-devel-1.4.2-3.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="harfbuzz-tools-1.4.2-3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1">harfbuzz-tools-1.4.2-3.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavcodec-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1">libavcodec-devel-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavcodec57-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavcodec57-3.2.2-2.1">libavcodec57-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavcodec57-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1">libavcodec57-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavdevice-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1">libavdevice-devel-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavdevice57-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavdevice57-3.2.2-2.1">libavdevice57-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavdevice57-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1">libavdevice57-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavfilter-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1">libavfilter-devel-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavfilter6-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavfilter6-3.2.2-2.1">libavfilter6-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavfilter6-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1">libavfilter6-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavformat-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1">libavformat-devel-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavformat57-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavformat57-3.2.2-2.1">libavformat57-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavformat57-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1">libavformat57-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavresample-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1">libavresample-devel-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavresample3-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavresample3-3.2.2-2.1">libavresample3-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavresample3-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1">libavresample3-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavutil-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1">libavutil-devel-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavutil55-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavutil55-3.2.2-2.1">libavutil55-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavutil55-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1">libavutil55-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libharfbuzz-icu0-1.4.2-3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1">libharfbuzz-icu0-1.4.2-3.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libharfbuzz-icu0-32bit-1.4.2-3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1">libharfbuzz-icu0-32bit-1.4.2-3.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libharfbuzz0-1.4.2-3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1">libharfbuzz0-1.4.2-3.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libharfbuzz0-32bit-1.4.2-3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1">libharfbuzz0-32bit-1.4.2-3.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libpostproc-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1">libpostproc-devel-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libpostproc54-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libpostproc54-3.2.2-2.1">libpostproc54-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libpostproc54-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1">libpostproc54-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswresample-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1">libswresample-devel-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswresample2-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libswresample2-3.2.2-2.1">libswresample2-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswresample2-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1">libswresample2-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswscale-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1">libswscale-devel-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswscale4-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libswscale4-3.2.2-2.1">libswscale4-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswscale4-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1">libswscale4-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="chromedriver-56.0.2924.87-102.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1">chromedriver-56.0.2924.87-102.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="chromium-56.0.2924.87-102.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:chromium-56.0.2924.87-102.1">chromium-56.0.2924.87-102.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="ffmpeg3-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1">ffmpeg3-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="harfbuzz-1.4.2-3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:harfbuzz-1.4.2-3.1">harfbuzz-1.4.2-3.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="harfbuzz-devel-1.4.2-3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1">harfbuzz-devel-1.4.2-3.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="harfbuzz-tools-1.4.2-3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1">harfbuzz-tools-1.4.2-3.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavcodec-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1">libavcodec-devel-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavcodec57-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavcodec57-3.2.2-2.1">libavcodec57-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavcodec57-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1">libavcodec57-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavdevice-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1">libavdevice-devel-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavdevice57-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavdevice57-3.2.2-2.1">libavdevice57-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavdevice57-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1">libavdevice57-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavfilter-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1">libavfilter-devel-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavfilter6-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavfilter6-3.2.2-2.1">libavfilter6-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavfilter6-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1">libavfilter6-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavformat-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1">libavformat-devel-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavformat57-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavformat57-3.2.2-2.1">libavformat57-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavformat57-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1">libavformat57-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavresample-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1">libavresample-devel-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavresample3-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavresample3-3.2.2-2.1">libavresample3-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavresample3-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1">libavresample3-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavutil-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1">libavutil-devel-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavutil55-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavutil55-3.2.2-2.1">libavutil55-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavutil55-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1">libavutil55-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libharfbuzz-icu0-1.4.2-3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1">libharfbuzz-icu0-1.4.2-3.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libharfbuzz-icu0-32bit-1.4.2-3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1">libharfbuzz-icu0-32bit-1.4.2-3.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libharfbuzz0-1.4.2-3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1">libharfbuzz0-1.4.2-3.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libharfbuzz0-32bit-1.4.2-3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1">libharfbuzz0-32bit-1.4.2-3.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libpostproc-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1">libpostproc-devel-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libpostproc54-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libpostproc54-3.2.2-2.1">libpostproc54-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libpostproc54-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1">libpostproc54-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswresample-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1">libswresample-devel-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswresample2-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libswresample2-3.2.2-2.1">libswresample2-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswresample2-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1">libswresample2-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswscale-devel-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1">libswscale-devel-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswscale4-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libswscale4-3.2.2-2.1">libswscale4-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswscale4-32bit-3.2.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1">libswscale4-32bit-3.2.2-2.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled object owner relationships, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5006</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5006.html</URL>
        <Description>CVE-2017-5006</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled the sequence of events when closing a page, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5007</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5007.html</URL>
        <Description>CVE-2017-5007</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker controlled JavaScript to be run during the invocation of a private script method, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5008</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5008.html</URL>
        <Description>CVE-2017-5008</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5009</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5009.html</URL>
        <Description>CVE-2017-5009</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promises in an inappropriate context, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5010</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5010.html</URL>
        <Description>CVE-2017-5010</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5011</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5011.html</URL>
        <Description>CVE-2017-5011</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5012</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5012.html</URL>
        <Description>CVE-2017-5012</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Google Chrome prior to 56.0.2924.76 for Linux incorrectly handled new tab page navigations in non-selected tabs, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5013</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5013.html</URL>
        <Description>CVE-2017-5013</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5014</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5014.html</URL>
        <Description>CVE-2017-5014</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unicode glyphs, which allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.</Note>
    </Notes>
    <CVE>CVE-2017-5015</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5015.html</URL>
        <Description>CVE-2017-5015</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elements from being displayed by non-visible pages, which allowed a remote attacker to show certain UI elements on a page they don't control via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5016</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5016.html</URL>
        <Description>CVE-2017-5016</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="12">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attacker to possibly extract image fragments on systems with GeForce 8600M graphics chips via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5017</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5017.html</URL>
        <Description>CVE-2017-5017</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="13">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, had an insufficiently strict content security policy on the Chrome app launcher page, which allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5018</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5018.html</URL>
        <Description>CVE-2017-5018</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="14">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5019</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5019.html</URL>
        <Description>CVE-2017-5019</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="15">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to require a user gesture for powerful download operations, which allowed a remote attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5020</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5020.html</URL>
        <Description>CVE-2017-5020</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="16">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5021</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5021.html</URL>
        <Description>CVE-2017-5021</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="17">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5022</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5022.html</URL>
        <Description>CVE-2017-5022</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="18">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit a near null dereference via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5023</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5023.html</URL>
        <Description>CVE-2017-5023</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="19">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.</Note>
    </Notes>
    <CVE>CVE-2017-5024</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5024.html</URL>
        <Description>CVE-2017-5024</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="20">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.</Note>
    </Notes>
    <CVE>CVE-2017-5025</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5025.html</URL>
        <Description>CVE-2017-5025</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="21">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which allowed a remote attacker to show alerts on a page they don't control via a crafted HTML page.</Note>
    </Notes>
    <CVE>CVE-2017-5026</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libswscale4-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromedriver-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:chromium-56.0.2924.87-102.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ffmpeg3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-devel-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:harfbuzz-tools-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavcodec57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavdevice57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavfilter6-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavformat57-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavresample3-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libavutil55-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz-icu0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libharfbuzz0-32bit-1.4.2-3.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libpostproc54-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswresample2-32bit-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale-devel-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-3.2.2-2.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libswscale4-32bit-3.2.2-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5026.html</URL>
        <Description>CVE-2017-5026</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022049</URL>
        <Description>SUSE Bug 1022049</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
