USN-6120-1: SpiderMonkey vulnerabilities
Several security issues were discovered in the SpiderMonkey JavaScript library. If a user were tricked into opening malicious JavaScript applications or processing malformed data, a remote attacker could exploit a variety of issues related to JavaScript security, including denial of service attacks, and arbitrary code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libmozjs-102-0to a version that resolves this vulnerability.Fixed in 102.11.0-0ubuntu0.23.04.1 - Upgrade
Upgrade
ubuntu/libmozjs-102-0to a version that resolves this vulnerability.Fixed in 102.11.0-0ubuntu0.22.10.1 - Upgrade
Upgrade
ubuntu/libmozjs-102-0to a version that resolves this vulnerability.Fixed in 102.11.0-0ubuntu0.22.04.1
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this advisory?
The vulnerability ID for this advisory is USN-6120-1.
What software is affected by this vulnerability?
The libmozjs-102-0 package on Ubuntu versions 23.04, 22.10, and 22.04 is affected by this vulnerability.
How can this vulnerability be exploited?
This vulnerability can be exploited if a user opens malicious JavaScript applications or processes malformed data.
What is the severity of this vulnerability?
The severity of this vulnerability is not mentioned in the advisory.
How can I fix this vulnerability?
To fix this vulnerability, it is recommended to update the libmozjs-102-0 package to version 102.11.0-0ubuntu0.23.04.1 for Ubuntu 23.04, version 102.11.0-0ubuntu0.22.10.1 for Ubuntu 22.10, and version 102.11.0-0ubuntu0.22.04.1 for Ubuntu 22.04.