Ubuntu Security Notice USN-5494-1 ≈ Packet Storm

Roger Wilco Alertes 27 juin 2022 Affichages : 280

Home ^[1] Files ^[2] News ^[3] &[SERVICES_TAB] Contact ^[4] Add New ^[5]

Ubuntu Security Notice USN-5494-1^[6]: Authored by Ubuntu ^[7] | Site security.ubuntu.com ^[8]; Ubuntu Security Notice 5494-1 - It was discovered that SpiderMonkey JavaScript Library incorrectly generated certain assembly code. An remote attacker could possibly use this issue to cause a crash or expose sensitive information. It was discovered that SpiderMonkey JavaScript Library incorrectly generated certain assembly code. An remote attacker could possibly use this issue to cause a crash.; systems | linux ^[9], ubuntu ^[10]; advisories | CVE-2022-28285 ^[11], CVE-2022-31740 ^[12]; SHA-256 | 62e4533e597b9e92d3946e276abc7a4db354b90ce9d04294a5b9bdd9d1b3ab2f; Download ^[13] | Favorite ^[14] | View ^[15]

        =========================================================================
Ubuntu Security Notice USN-5494-1
June 27, 2022
mozjs91 vulnerabilities
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.04 LTS
Summary:
Several security issues were fixed in SpiderMonkey JavaScript Library.
Software Description:
- mozjs91: SpiderMonkey JavaScript library
Details:
It was discovered that SpiderMonkey JavaScript Library incorrectly
generated certain assembly code. An remote attacker could
possibly use this issue to cause a crash or expose sensitive
information. (CVE-2022-28285)
It was discovered that SpiderMonkey JavaScript Library incorrectly
generated certain assembly code. An remote attacker could
possibly use this issue to cause a crash. (CVE-2022-31740)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.04 LTS:
libmozjs-91-0                   91.10.0-0ubuntu1
After a standard system update you need to restart any application that use
SpiderMonkey JavaScript Library to make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5494-1
CVE-2022-28285, CVE-2022-31740, https://launchpad.net/bugs/1976260, https://launchpad.net/bugs/1978961
Package Information:
https://launchpad.net/ubuntu/+source/mozjs91/91.10.0-0ubuntu1