Описание
Security update for mozjs78
This update for mozjs78 fixes the following issues
- CVE-2026-32776: libexpat: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259728).
- CVE-2026-32777: libexpat: denial of service due to infinite loop in DTD content parsing (bsc#1259713).
- CVE-2026-32778: libexpat: NULL pointer dereference in
setContexton retry after an out-of-memory condition (bsc#1259731).
Список пакетов
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
libmozjs-78-0-78.15.0-150400.3.17.1
mozjs78-devel-78.15.0-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
libmozjs-78-0-78.15.0-150400.3.17.1
mozjs78-devel-78.15.0-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
libmozjs-78-0-78.15.0-150400.3.17.1
mozjs78-devel-78.15.0-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
libmozjs-78-0-78.15.0-150400.3.17.1
mozjs78-devel-78.15.0-150400.3.17.1
SUSE Linux Enterprise Module for Package Hub 15 SP7
libmozjs-78-0-78.15.0-150400.3.17.1
SUSE Linux Enterprise Server 15 SP4-LTSS
libmozjs-78-0-78.15.0-150400.3.17.1
mozjs78-devel-78.15.0-150400.3.17.1
SUSE Linux Enterprise Server 15 SP5-LTSS
libmozjs-78-0-78.15.0-150400.3.17.1
mozjs78-devel-78.15.0-150400.3.17.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
libmozjs-78-0-78.15.0-150400.3.17.1
mozjs78-devel-78.15.0-150400.3.17.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
libmozjs-78-0-78.15.0-150400.3.17.1
mozjs78-devel-78.15.0-150400.3.17.1
Ссылки
- Link for SUSE-SU-2026:1956-1
- E-Mail link for SUSE-SU-2026:1956-1
- SUSE Security Ratings
- SUSE Bug 1259713
- SUSE Bug 1259728
- SUSE Bug 1259731
- SUSE CVE CVE-2026-32776 page
- SUSE CVE CVE-2026-32777 page
- SUSE CVE CVE-2026-32778 page
Описание
libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.
Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libmozjs-78-0-78.15.0-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:mozjs78-devel-78.15.0-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libmozjs-78-0-78.15.0-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:mozjs78-devel-78.15.0-150400.3.17.1
Ссылки
- CVE-2026-32776
- SUSE Bug 1259724
Описание
libexpat before 2.7.5 allows an infinite loop while parsing DTD content.
Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libmozjs-78-0-78.15.0-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:mozjs78-devel-78.15.0-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libmozjs-78-0-78.15.0-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:mozjs78-devel-78.15.0-150400.3.17.1
Ссылки
- CVE-2026-32777
- SUSE Bug 1259710
Описание
libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.
Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libmozjs-78-0-78.15.0-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:mozjs78-devel-78.15.0-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libmozjs-78-0-78.15.0-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:mozjs78-devel-78.15.0-150400.3.17.1
Ссылки
- CVE-2026-32778
- SUSE Bug 1259725