Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
202

openSUSE: 2025:1340-1 moderate security update for mozjs52 vulnerability

An update that solves one vulnerability can now be installed.. # Security update for mozjs52 Announcement ID: SUSE-SU-2025:1340-1 Release Date: 2025-04-17T11:45:56Z Rating: moderate References: * bsc#1234837 Cross-References: * CVE-2024-56431 CVSS scores: * CVE-2024-56431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-56431 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56431 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for mozjs52 fixes the following issues: * CVE-2024-56431: Fixed a negative shift in huffdec.c (bsc#1234837). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-1340=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-1340=1 openSUSE-SLE-15.6-2025-1340=1 ## Package List: * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libmozjs-115-0-debuginfo-115.4.0-150600.3.9.1 * mozjs115-devel-115.4.0-150600.3.9.1 * libmozjs-115-0-115.4.0-150600.3.9.1 * mozjs115-debugsource-115.4.0-150600.3.9.1 * mozjs115-debuginfo-115.4.0-150600.3.9.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i686) * libmozjs-115-0-debuginfo-115.4.0-150600.3.9.1 * mozjs115-115.4.0-150600.3.9.1 * mozjs115-devel-115.4.0-150600.3.9.1 * libmozjs-115-0-115.4.0-150600.3.9.1 * mozjs115-debugsource-115.4.0-150600.3.9.1 * mozjs115-debuginfo-115.4.0-150600.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-56431.html * https://bugzilla.suse.com/show_bug.cgi?id=1234837 . Important notice for openSUSE users: An essential update has been released to address vulnerabilities linked to mozjs52. Apply the update promptly to ensure your system's security.. Security patch, OpenSUSE, Mozjs, Threat mitigation. . LinuxSecurity.com Team

Calendar 2 Apr 17, 2025 OpenSUSE
202

openSUSE: 2025:1287-1 moderate: mozjs52 buffer overflow

An update that solves one vulnerability can now be installed.. # Security update for mozjs52 Announcement ID: SUSE-SU-2025:1287-1 Release Date: 2025-04-15T16:25:14Z Rating: moderate References: * bsc#1234837 Cross-References: * CVE-2024-56431 CVSS scores: * CVE-2024-56431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-56431 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56431 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for mozjs52 fixes the following issues: * CVE-2024-56431: Fixed a negative shift in huffdec.c (bsc#1234837). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1287=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-1287=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * mozjs52-debugsource-52.6.0-150000.3.6.1 * libmozjs-52-debuginfo-52.6.0-150000.3.6.1 * mozjs52-devel-52.6.0-150000.3.6.1 * libmozjs-52-52.6.0-150000.3.6.1 * mozjs52-debuginfo-52.6.0-150000.3.6.1 * mozjs52-52.6.0-150000.3.6.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * libmozjs-52-52.6.0-150000.3.6.1 * mozjs52-debugsource-52.6.0-150000.3.6.1 * mozjs52-debuginfo-52.6.0-150000.3.6.1 * libmozjs-52-debuginfo-52.6.0-150000.3.6.1 ## References: *https://www.suse.com/security/cve/CVE-2024-56431.html * https://bugzilla.suse.com/show_bug.cgi?id=1234837 . The latest openSUSE security update addresses a moderate CVE in Mozilla's JavaScript engine, critical for safeguarding user data and system integrity. openSUSE Security Update, mozjs52 Vulnerabilities, Software Patch Instructions, Linux Security Advisory. . LinuxSecurity.com Team

Calendar 2 Apr 15, 2025 OpenSUSE
202

openSUSE Leap 15.6: SUSE-SU-2024:4411-1 moderate: mozjs115 issues fixed

An update that solves three vulnerabilities and has one security fix can now be installed.. # Security update for mozjs115 Announcement ID: SUSE-SU-2024:4411-1 Release Date: 2024-12-23T12:46:06Z Rating: moderate References: * bsc#1232599 * bsc#1232602 * bsc#1233766 * bsc#1233786 Cross-References: * CVE-2024-11403 * CVE-2024-11498 * CVE-2024-50602 CVSS scores: * CVE-2024-11403 ( SUSE ): 6.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L * CVE-2024-11403 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-11498 ( SUSE ): 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2024-11498 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-50602 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-50602 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-50602 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves three vulnerabilities and has one security fix can now be installed. ## Description: This update for mozjs115 fixes the following issues: * CVE-2024-11498: Fixed resource exhaustion via Stack overflow in libjxl (bsc#1233786) * CVE-2024-11403: Fixed out of Bounds Memory Read/Write in libjxl (bsc#1233766) * CVE-2024-50602: Fixed DoS via XML_ResumeParser in libexpat (bsc#1232602) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaSTonline_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4411=1 openSUSE-SLE-15.6-2024-4411=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-4411=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i686) * libmozjs-115-0-debuginfo-115.4.0-150600.3.6.1 * libmozjs-115-0-115.4.0-150600.3.6.1 * mozjs115-debuginfo-115.4.0-150600.3.6.1 * mozjs115-debugsource-115.4.0-150600.3.6.1 * mozjs115-devel-115.4.0-150600.3.6.1 * mozjs115-115.4.0-150600.3.6.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libmozjs-115-0-debuginfo-115.4.0-150600.3.6.1 * libmozjs-115-0-115.4.0-150600.3.6.1 * mozjs115-debuginfo-115.4.0-150600.3.6.1 * mozjs115-debugsource-115.4.0-150600.3.6.1 * mozjs115-devel-115.4.0-150600.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-11403.html * https://www.suse.com/security/cve/CVE-2024-11498.html * https://www.suse.com/security/cve/CVE-2024-50602.html * https://bugzilla.suse.com/show_bug.cgi?id=1232599 * https://bugzilla.suse.com/show_bug.cgi?id=1232602 * https://bugzilla.suse.com/show_bug.cgi?id=1233766 * https://bugzilla.suse.com/show_bug.cgi?id=1233786 . The latest security patch for mozjs115 offers detailed guidance on resolving multiple vulnerabilities in openSUSE.. mozjs115, openSUSE Update, security fix, DoS Prevention, resource management. . LinuxSecurity.com Team

Calendar 2 Dec 23, 2024 OpenSUSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here