Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Mageia 9 MGASA-2024-0396: mozjs78 Crash due to XML_ResumeParser Failure

mageia
Calendar Grey December 21, 2024
Dist Mageia Esm H88
Security notice MGASA-2024-0420 reveals enhancements for mozjs80 packages aimed at resolving severe libexpat failure concerns.
An issue was discovered in libexpat before 2.6.4

Summary

An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. (CVE-2024-50602)

References

- https://bugs.mageia.org/show_bug.cgi?id=33864

-

- https://www.cve.org/CVERecord?id=CVE-2024-50602

Topics%20covered

Topics Covered

security advisory crash mageia libexpat mozjs78 xml_parser

Resolution

SRPMS

- 9/core/mozjs78-78.15.0-7.2.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 21 Dec 2024
URL: https://advisories.mageia.org/MGASA-2024-0396.html
Type: security
CVE: CVE-2024-50602

Topics%20covered

Topics Covered

security advisory crash mageia libexpat mozjs78 xml_parser

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here