SUSE-SU-2025:4390-1

Details

Description of the patch:

This update for rhino fixes the following issues:

Update to version 1.7.15.1.

Security issues fixed:

CVE-2025-66453: high CPU consumption when processing specific numbers via the toFixed() function (bsc#1254481).

Other changes and issues fixed:

Version 1.7.15:
- Basic support for 'rest parameters'.
- Improvements in Unicode support.
- 'Symbol.species' implemented in many places.
- More correct property ordering in many places.
- Miscellaneous improvements and bug fixes.

Affected Packages

rhino

SUSE Linux Enterprise Desktop 15 SP6SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP6SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Basesystem 15 SP6

Fixed in:

1.7.15.1-150200.12.7.1

rhino-demo

openSUSE Leap 15.6

Fixed in:

1.7.15.1-150200.12.7.1

rhino-engine

openSUSE Leap 15.6

Fixed in:

1.7.15.1-150200.12.7.1

rhino-javadoc

openSUSE Leap 15.6