Back Linuxsecurity

openSUSE: mozjs60 Moderate Security Fix CVE-2024-45490 2026:0044

Linuxsecurity •LinuxSecurity Advisories • January 7, 2026

This update for mozjs60 fixes the following issues: * CVE-2024-50602: embedded expat: make XML_StopParser refuse to stop/suspend an unstarted parser and be explicit XML_PARSING in XML_StopParser (bsc#1232602) * CVE-2024-45492: embedded expat: detect integer overflow in function nextScaffoldPart (bsc#1230038) * CVE-2024-45491: embedded expat: detect integer overflow in dtdCopy (bsc#1230037) * CVE-2024-45490: embedded expat: reject negative len for XML_ParseBuffer (bsc#1230036)

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2026-44=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-44=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-44=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-44=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-44=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-44=1 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-44=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2026-44=1 * SUSE Linux Enterprise Read the Full Advisory

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch openSUSE-SLE-15.6-2026-44=1

* SUSE Linux Enterprise Micro for Rancher 5.3

zypper in -t patch SUSE-SLE-Micro-5.3-2026-44=1

* SUSE Linux Enterprise Micro 5.3

zypper in -t patch SUSE-SLE-Micro-5.3-2026-44=1

* SUSE Linux Enterprise Micro for Rancher 5.4

zypper in -t patch SUSE-SLE-Micro-5.4-2026-44=1

* SUSE Linux Enterprise Micro 5.4

zypper in -t patch SUSE-SLE-Micro-5.4-2026-44=1

* Basesystem Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-44=1

* Desktop Applications Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-44=1

* SUSE Linux Enterprise Micro 5.2

zypper in -t patch SUSE-SUSE-MicroOS-5.2-2026-44=1

* SUSE Linux Enterprise

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * libmozjs-60-debuginfo-60.9.0-150200.6.8.1 * mozjs60-devel-60.9.0-150200.6.8.1 * mozjs60-debuginfo-60.9.0-150200.6.8.1 * mozjs60-60.9.0-150200.6.8.1 * libmozjs-60-60.9.0-150200.6.8.1 * mozjs60-debugsource-60.9.0-150200.6.8.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * mozjs60-debugsource-60.9.0-150200.6.8.1 * libmozjs-60-debuginfo-60.9.0-150200.6.8.1 * libmozjs-60-60.9.0-150200.6.8.1 * mozjs60-debuginfo-60.9.0-150200.6.8.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * mozjs60-debugsource-60.9.0-150200.6.8.1 * libmozjs-60-debuginfo-60.9.0-150200.6.8.1 * libmozjs-60-60.9.0-150200.6.8.1 * mozjs60-debuginfo-60.9.0-150200.6.8.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * mozjs60-debugsource-60.9.0-150200.6.8.1 * libmozjs-60-debuginfo-60.9.0-150200.6.8.1 * libmozjs-60-60.9.0-150200.6.8.1 * Read the Full Advisory

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)

* libmozjs-60-debuginfo-60.9.0-150200.6.8.1

* mozjs60-devel-60.9.0-150200.6.8.1

* mozjs60-debuginfo-60.9.0-150200.6.8.1

* mozjs60-60.9.0-150200.6.8.1

* libmozjs-60-60.9.0-150200.6.8.1

* mozjs60-debugsource-60.9.0-150200.6.8.1

* SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64)

* mozjs60-debugsource-60.9.0-150200.6.8.1

* libmozjs-60-debuginfo-60.9.0-150200.6.8.1

* libmozjs-60-60.9.0-150200.6.8.1

* mozjs60-debuginfo-60.9.0-150200.6.8.1