Описание
Security update for mozjs60
This update for mozjs60 fixes the following issues:
- CVE-2024-56431: Fixed a negative shift in huffdec.c (bsc#1234837).
Список пакетов
Image SLES15-SP3-Micro-5-2-BYOS-Azure
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP3-Micro-5-2-BYOS-GCE
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-BYOS
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-BYOS-Azure
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-BYOS-EC2
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-BYOS-GCE
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-HPC-BYOS
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-HPC-BYOS-Azure
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-HPC-BYOS-EC2
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-HPC-BYOS-GCE
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-HPC-EC2
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-HPC-GCE
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Hardened-BYOS
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Hardened-BYOS-Azure
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Hardened-BYOS-EC2
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Hardened-BYOS-GCE
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Manager-Server-4-3-BYOS
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Micro-5-3
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Micro-5-3-BYOS
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Micro-5-3-BYOS-Azure
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Micro-5-3-BYOS-EC2
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Micro-5-3-BYOS-GCE
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Micro-5-3-EC2
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Micro-5-4
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Micro-5-4-BYOS
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Micro-5-4-BYOS-Azure
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Micro-5-4-BYOS-EC2
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Micro-5-4-BYOS-GCE
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Micro-5-4-EC2
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-Micro-5-4-GCE
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-Azure
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-Azure-LI-BYOS
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-BYOS
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-BYOS-Azure
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-BYOS-EC2
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-BYOS-GCE
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-EC2
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-GCE
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-Hardened
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-Hardened-Azure
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-Hardened-BYOS
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-Hardened-BYOS-EC2
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAP-Hardened-GCE
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAPCAL
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAPCAL-Azure
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAPCAL-EC2
libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP4-SAPCAL-GCE
libmozjs-60-60.9.0-150200.6.3.1
SUSE Linux Enterprise Micro 5.1
libmozjs-60-60.9.0-150200.6.3.1
SUSE Linux Enterprise Micro 5.2
libmozjs-60-60.9.0-150200.6.3.1
SUSE Linux Enterprise Micro 5.3
libmozjs-60-60.9.0-150200.6.3.1
SUSE Linux Enterprise Micro 5.4
libmozjs-60-60.9.0-150200.6.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
libmozjs-60-60.9.0-150200.6.3.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP6
mozjs60-devel-60.9.0-150200.6.3.1
openSUSE Leap 15.6
libmozjs-60-60.9.0-150200.6.3.1
mozjs60-60.9.0-150200.6.3.1
mozjs60-devel-60.9.0-150200.6.3.1
Ссылки
- Link for SUSE-SU-2025:1365-1
- E-Mail link for SUSE-SU-2025:1365-1
- SUSE Security Ratings
- SUSE Bug 1234837
- SUSE CVE CVE-2024-56431 page
Описание
oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.
Затронутые продукты
Image SLES15-SP3-Micro-5-2-BYOS-Azure:libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP3-Micro-5-2-BYOS-GCE:libmozjs-60-60.9.0-150200.6.3.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libmozjs-60-60.9.0-150200.6.3.1
Ссылки
- CVE-2024-56431
- SUSE Bug 1234836