Описание
Security update for mozjs115
This update for mozjs115 fixes the following issues:
Changes in mozjs115:
- CVE-2026-32776: Fixed a NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259728)
- CVE-2026-32777: Fixed a denial of service due to infinite loop in DTD content parsing (bsc#1259713)
- CVE-2026-32778: Fixed a NULL pointer dereference in 'setContext' on retry after an out-of-memory condition (bsc#1259731)
Список пакетов
openSUSE Leap 16.0
libmozjs-115-0-115.15.0-bp160.2.1
mozjs115-115.15.0-bp160.2.1
mozjs115-devel-115.15.0-bp160.2.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1259713
- SUSE Bug 1259728
- SUSE Bug 1259731
- SUSE CVE CVE-2026-32776 page
- SUSE CVE CVE-2026-32777 page
- SUSE CVE CVE-2026-32778 page
Описание
libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.
Затронутые продукты
openSUSE Leap 16.0:libmozjs-115-0-115.15.0-bp160.2.1
openSUSE Leap 16.0:mozjs115-115.15.0-bp160.2.1
openSUSE Leap 16.0:mozjs115-devel-115.15.0-bp160.2.1
Ссылки
- CVE-2026-32776
- SUSE Bug 1259724
Описание
libexpat before 2.7.5 allows an infinite loop while parsing DTD content.
Затронутые продукты
openSUSE Leap 16.0:libmozjs-115-0-115.15.0-bp160.2.1
openSUSE Leap 16.0:mozjs115-115.15.0-bp160.2.1
openSUSE Leap 16.0:mozjs115-devel-115.15.0-bp160.2.1
Ссылки
- CVE-2026-32777
- SUSE Bug 1259710
Описание
libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.
Затронутые продукты
openSUSE Leap 16.0:libmozjs-115-0-115.15.0-bp160.2.1
openSUSE Leap 16.0:mozjs115-115.15.0-bp160.2.1
openSUSE Leap 16.0:mozjs115-devel-115.15.0-bp160.2.1
Ссылки
- CVE-2026-32778
- SUSE Bug 1259725