SUSE-SU-2026:0044-1

Details

This update for mozjs60 fixes the following issues:

CVE-2024-45492: embedded expat: detect integer overflow in function nextScaffoldPart (bsc#1230038)
CVE-2024-45491: embedded expat: detect integer overflow in dtdCopy (bsc#1230037)
CVE-2024-45490: embedded expat: reject negative len for XML_ParseBuffer (bsc#1230036)
CVE-2024-50602: libexpat: DoS via XML_ResumeParser (bsc#1232602)

Affected Packages

libmozjs-60

SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Module for Basesystem 15 SP7openSUSE Leap 15.6

Fixed in:

60.9.0-150200.6.8.1

mozjs60

SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Module for Basesystem 15 SP7SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

60.9.0-150200.6.8.1

mozjs60-devel

SUSE Linux Enterprise Module for Desktop Applications 15 SP7openSUSE Leap 15.6

Fixed in:

60.9.0-150200.6.8.1

References

REPORThttps://bugzilla.suse.com/1230036 REPORThttps://bugzilla.suse.com/1230037 REPORThttps://bugzilla.suse.com/1230038 REPORThttps://bugzilla.suse.com/1232602 WEBhttps://www.suse.com/security/cve/CVE-2024-45490 WEBhttps://www.suse.com/security/cve/CVE-2024-45491 WEBhttps://www.suse.com/security/cve/CVE-2024-45492 WEBhttps://www.suse.com/security/cve/CVE-2024-50602 ADVISORYhttps://www.suse.com/support/update/announcement/2026/suse-su-20260044-1/

SUSE-SU-2026:0044-1

Details

Affected Packages

References

Upstream

Related

Ecosystems(6)

Timeline