Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:0044-1

Опубликовано: 06 янв. 2026
Источник: suse-cvrf

Описание

Security update for mozjs60

This update for mozjs60 fixes the following issues:

  • CVE-2024-45492: embedded expat: detect integer overflow in function nextScaffoldPart (bsc#1230038)
  • CVE-2024-45491: embedded expat: detect integer overflow in dtdCopy (bsc#1230037)
  • CVE-2024-45490: embedded expat: reject negative len for XML_ParseBuffer (bsc#1230036)
  • CVE-2024-50602: libexpat: DoS via XML_ResumeParser (bsc#1232602)

Список пакетов

Image SLES15-SP4-BYOS
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-BYOS-Azure
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-BYOS-EC2
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-BYOS-GCE
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-HPC-BYOS
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-HPC-BYOS-Azure
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-HPC-BYOS-EC2
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-HPC-BYOS-GCE
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-HPC-EC2
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-HPC-GCE
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-Hardened-BYOS
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-Hardened-BYOS-Azure
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-Hardened-BYOS-EC2
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-Hardened-BYOS-GCE
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-Manager-Server-4-3-BYOS
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-Micro-5-3-BYOS
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-Micro-5-3-BYOS-Azure
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-Micro-5-4-BYOS
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-Micro-5-4-BYOS-Azure
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-Azure
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-Azure-LI-BYOS
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-BYOS
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-BYOS-Azure
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-BYOS-EC2
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-BYOS-GCE
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-EC2
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-GCE
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-Hardened
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-Hardened-Azure
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-Hardened-BYOS
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-Hardened-BYOS-EC2
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAP-Hardened-GCE
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAPCAL
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAPCAL-Azure
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAPCAL-EC2
libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-SAPCAL-GCE
libmozjs-60-60.9.0-150200.6.8.1
SUSE Linux Enterprise Micro 5.2
libmozjs-60-60.9.0-150200.6.8.1
SUSE Linux Enterprise Micro 5.3
libmozjs-60-60.9.0-150200.6.8.1
SUSE Linux Enterprise Micro 5.4
libmozjs-60-60.9.0-150200.6.8.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
libmozjs-60-60.9.0-150200.6.8.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7
mozjs60-devel-60.9.0-150200.6.8.1
openSUSE Leap 15.6
libmozjs-60-60.9.0-150200.6.8.1
mozjs60-60.9.0-150200.6.8.1
mozjs60-devel-60.9.0-150200.6.8.1

Ссылки

Описание

An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.

Затронутые продукты
Image SLES15-SP4-BYOS-Azure:libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-BYOS-EC2:libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-BYOS-GCE:libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-BYOS:libmozjs-60-60.9.0-150200.6.8.1
Ссылки

Описание

An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX).

Затронутые продукты
Image SLES15-SP4-BYOS-Azure:libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-BYOS-EC2:libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-BYOS-GCE:libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-BYOS:libmozjs-60-60.9.0-150200.6.8.1
Ссылки

Описание

An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX).

Затронутые продукты
Image SLES15-SP4-BYOS-Azure:libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-BYOS-EC2:libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-BYOS-GCE:libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-BYOS:libmozjs-60-60.9.0-150200.6.8.1
Ссылки

Описание

An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.

Затронутые продукты
Image SLES15-SP4-BYOS-Azure:libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-BYOS-EC2:libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-BYOS-GCE:libmozjs-60-60.9.0-150200.6.8.1
Image SLES15-SP4-BYOS:libmozjs-60-60.9.0-150200.6.8.1
Ссылки