Home[1] Files[2] News[3] &[SERVICES_TAB] Contact[4] Add New[5]
- Ubuntu Security Notice USN-5494-1[6]
- Authored by Ubuntu[7] | Site security.ubuntu.com[8]
-
Ubuntu Security Notice 5494-1 - It was discovered that SpiderMonkey JavaScript Library incorrectly generated certain assembly code. An remote attacker could possibly use this issue to cause a crash or expose sensitive information. It was discovered that SpiderMonkey JavaScript Library incorrectly generated certain assembly code. An remote attacker could possibly use this issue to cause a crash.
- systems | linux[9], ubuntu[10]
- advisories | CVE-2022-28285[11], CVE-2022-31740[12]
- SHA-256 |
62e4533e597b9e92d3946e276abc7a4db354b90ce9d04294a5b9bdd9d1b3ab2f
- Download[13] | Favorite[14] | View[15]
Change Mirror[16] Download[17]
=========================================================================
Ubuntu Security Notice USN-5494-1
June 27, 2022
mozjs91 vulnerabilities
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.04 LTS
Summary:
Several security issues were fixed in SpiderMonkey JavaScript Library.
Software Description:
- mozjs91: SpiderMonkey JavaScript library
Details:
It was discovered that SpiderMonkey JavaScript Library incorrectly
generated certain assembly code. An remote attacker could
possibly use this issue to cause a crash or expose sensitive
information. (CVE-2022-28285)
It was discovered that SpiderMonkey JavaScript Library incorrectly
generated certain assembly code. An remote attacker could
possibly use this issue to cause a crash. (CVE-2022-31740)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.04 LTS:
libmozjs-91-0 91.10.0-0ubuntu1
After a standard system update you need to restart any application that use
SpiderMonkey JavaScript Library to make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5494-1
CVE-2022-28285, CVE-2022-31740, https://launchpad.net/bugs/1976260, https://launchpad.net/bugs/1978961
Package Information:
https://launchpad.net/ubuntu/+source/mozjs91/91.10.0-0ubuntu1
File Tags
- ActiveX[22] (932)
- Advisory[23] (77,665)
- Arbitrary[24] (15,136)
- BBS[25] (2,859)
- Bypass[26] (1,571)
- CGI[27] (1,011)
- Code Execution[28] (6,682)
- Conference[29] (668)
- Cracker[30] (797)
- CSRF[31] (3,272)
- DoS[32] (21,858)
- Encryption[33] (2,331)
- Exploit[34] (49,866)
- File Inclusion[35] (4,148)
- File Upload[36] (943)
- Firewall[37] (821)
- Info Disclosure[38] (2,549)
- Intrusion Detection[39] (853)
- Java[40] (2,790)
- JavaScript[41] (798)
- Kernel[42] (6,043)
- Local[43] (14,015)
- Magazine[44] (586)
- Overflow[45] (12,183)
- Perl[46] (1,410)
- PHP[47] (5,041)
- Proof of Concept[48] (2,283)
- Protocol[49] (3,312)
- Python[50] (1,396)
- Remote[51] (29,705)
- Root[52] (3,451)
- Ruby[53] (576)
- Scanner[54] (1,630)
- Security Tool[55] (7,688)
- Shell[56] (3,061)
- Shellcode[57] (1,202)
- Sniffer[58] (881)
- Spoof[59] (2,084)
- SQL Injection[60] (16,008)
- TCP[61] (2,359)
- Trojan[62] (676)
- UDP[63] (866)
- Virus[64] (659)
- Vulnerability[65] (30,449)
- Web[66] (9,029)
- Whitepaper[67] (3,715)
- x86[68] (942)
- XSS[69] (17,335)
- Other[70]
File Archives
- June 2022[71]
- May 2022[72]
- April 2022[73]
- March 2022[74]
- February 2022[75]
- January 2022[76]
- December 2021[77]
- November 2021[78]
- October 2021[79]
- September 2021[80]
- August 2021[81]
- July 2021[82]
- Older[83]
Systems
- AIX[84] (426)
- Apple[85] (1,883)
- BSD[86] (368)
- CentOS[87] (55)
- Cisco[88] (1,913)
- Debian[89] (5,948)
- Fedora[90] (1,690)
- FreeBSD[91] (1,241)
- Gentoo[92] (4,152)
- HPUX[93] (878)
- iOS[94] (318)
- iPhone[95] (108)
- IRIX[96] (220)
- Juniper[97] (67)
- Linux[98] (42,334)
- Mac OS X[99] (683)
- Mandriva[100] (3,105)
- NetBSD[101] (255)
- OpenBSD[102] (478)
- RedHat[103] (11,656)
- Slackware[104] (941)
- Solaris[105] (1,607)
- SUSE[106] (1,444)
- Ubuntu[107] (7,855)
- UNIX[108] (9,073)
- UnixWare[109] (185)
- Windows[110] (6,420)
- Other[111]
Read more https://packetstormsecurity.com/files/167600/USN-5494-1.txt