USN-3688-1: Spidermonkey vulnerabilities

mozjs52 vulnerabilities

A security issue affects these releases of Ubuntu and its derivatives:

• Ubuntu 18.04 LTS
• Ubuntu 17.10

Summary

Several security issues were fixed in Spidermonkey.

Software Description

• mozjs52 - SpiderMonkey JavaScript library

Details

Multiple memory safety issues were fixed in Spidermonkey. An attacker could potentially exploit these to cause a denial of service, or execute arbitrary code.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 18.04 LTS

libmozjs-52-0 - 52.8.1-0ubuntu0.18.04.1

Ubuntu 17.10

libmozjs-52-0 - 52.8.1-0ubuntu0.17.10.1

To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to reboot your computer to make all the necessary changes.

References

• CVE-2017-7810
• CVE-2017-7826
• CVE-2018-5089
• CVE-2018-5125
• CVE-2018-5150

from Ubuntu Security Notices https://ift.tt/2I3X67h