VYPR

rpm package

suse/mozjs60&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6

pkg:rpm/suse/mozjs60&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6

Vulnerabilities (1)

  • CVE-2024-56431Dec 25, 2024
    affected < 60.9.0-150200.6.3.1fixed 60.9.0-150200.6.3.1

    oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.