SUSE-SU-2026:0044-1

Details

This update for mozjs60 fixes the following issues:

CVE-2024-45492: embedded expat: detect integer overflow in function nextScaffoldPart (bsc#1230038)
CVE-2024-45491: embedded expat: detect integer overflow in dtdCopy (bsc#1230037)
CVE-2024-45490: embedded expat: reject negative len for XML_ParseBuffer (bsc#1230036)
CVE-2024-50602: libexpat: DoS via XML_ResumeParser (bsc#1232602)

Affected Packages

SUSE:Linux Enterprise Micro 5.2libmozjs-60

Fixed in:

60.9.0-150200.6.8.1

SUSE:Linux Enterprise Micro 5.2mozjs60

Fixed in:

60.9.0-150200.6.8.1

SUSE:Linux Enterprise Micro 5.3libmozjs-60

Fixed in:

60.9.0-150200.6.8.1

SUSE:Linux Enterprise Micro 5.3mozjs60

Fixed in:

60.9.0-150200.6.8.1

SUSE:Linux Enterprise Micro 5.4libmozjs-60

Fixed in:

60.9.0-150200.6.8.1

SUSE:Linux Enterprise Micro 5.4mozjs60

Fixed in:

60.9.0-150200.6.8.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7libmozjs-60

Fixed in:

60.9.0-150200.6.8.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7mozjs60

Fixed in:

60.9.0-150200.6.8.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP7mozjs60

Fixed in:

60.9.0-150200.6.8.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP7mozjs60-devel

Fixed in:

60.9.0-150200.6.8.1

openSUSE:Leap 15.6libmozjs-60

Fixed in:

60.9.0-150200.6.8.1

openSUSE:Leap 15.6mozjs60

Fixed in:

60.9.0-150200.6.8.1

openSUSE:Leap 15.6mozjs60-devel

Fixed in:

60.9.0-150200.6.8.1

References

REPORThttps://bugzilla.suse.com/1230036 REPORThttps://bugzilla.suse.com/1230037 REPORThttps://bugzilla.suse.com/1230038 REPORThttps://bugzilla.suse.com/1232602 WEBhttps://www.suse.com/security/cve/CVE-2024-45490 WEBhttps://www.suse.com/security/cve/CVE-2024-45491 WEBhttps://www.suse.com/security/cve/CVE-2024-45492 WEBhttps://www.suse.com/security/cve/CVE-2024-50602 ADVISORYhttps://www.suse.com/support/update/announcement/2026/suse-su-20260044-1/

SUSE-SU-2026:0044-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline