# CVE-2024-50602: mozjs52: This update for mozjs52 fixes the following issues: - CVE-2024-45491: Fixed integer overflow in dtdCopy (bsc#1230037... CVE-2024-50602 is fixed in 12 products on 1 platform, first by expat 2.2.5-3ubuntu0.9+esm2, released October 26, 2024. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2024-50602 - Priority: Routine - CVSS: 5.9 (Medium) - EPSS: 0.0112 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Oct 26, 2024 ## Description This update for mozjs52 fixes the following issues: - CVE-2024-45491: Fixed integer overflow in dtdCopy (bsc#1230037) - CVE-2024-50602: Fixed DoS via XML_ResumeParser (bsc#1232599) - CVE-2024-45492: Fixed integer overflow in function nextScaffoldPart (bsc#1230038) - CVE-2024-45490: Fixed negative len for XML_ParseBuffer (bsc#1230036) ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | expat Debian 11.6 (bullseye) | 2.2.10-2+deb11u7 | [DLA-4145-1](https://patchblox.com/security/data/fix/linux/dla-4145-1.md) | Apr 30, 2025 | | Linux | expat Debian 12.15 (bookworm) | 2.5.0-1+deb12u2 | [DEBIAN-CVE-2024-50602](https://patchblox.com/security/data/fix/linux/debian-cve-2024-50602.md) | Oct 27, 2024 | | Linux | expat Debian 13.5 (trixie) | 2.6.3-2 | [DEBIAN-CVE-2024-50602](https://patchblox.com/security/data/fix/linux/debian-cve-2024-50602.md) | Oct 27, 2024 | | Linux | expat Debian 14 | 2.6.3-2 | [DEBIAN-CVE-2024-50602](https://patchblox.com/security/data/fix/linux/debian-cve-2024-50602.md) | Oct 27, 2024 | | Linux | expat RHEL 8 | 0:2.2.5-16.el8_10 | [RHSA-2024:9502](https://patchblox.com/security/data/fix/linux/rhsa-2024-9502.md) | Nov 13, 2024 | | Linux | expat RHEL 9 | 0:2.5.0-3.el9_5.1 | [RHSA-2024:9541](https://patchblox.com/security/data/fix/linux/rhsa-2024-9541.md) | Nov 13, 2024 | | Linux | expat Ubuntu 18.04.6 LTS (bionic) | 2.2.5-3ubuntu0.9+esm2 | [expat 2.2.5-3ubuntu0.9+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-expat-2.2.5-3ubuntu0.9-esm2.md) | Oct 26, 2024 | | Linux | expat Ubuntu 20.04 LTS (focal) | 2.2.9-1ubuntu0.8 | [expat 2.2.9-1ubuntu0.8](https://patchblox.com/security/data/fix/linux/ubuntu-focal-expat-2.2.9-1ubuntu0.8.md) | Oct 26, 2024 | | Linux | expat Ubuntu 22.04.1 LTS (jammy) | 2.4.7-1ubuntu0.5 | [expat 2.4.7-1ubuntu0.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-expat-2.4.7-1ubuntu0.5.md) | Oct 26, 2024 | | Linux | expat Ubuntu 24.04.5 LTS (noble) | 2.6.1-2ubuntu0.2 | [expat 2.6.1-2ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-expat-2.6.1-2ubuntu0.2.md) | Oct 26, 2024 | | Linux | expat Ubuntu 24.10 (oracular) | 2.6.2-2ubuntu0.1 | [expat 2.6.2-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-expat-2.6.2-2ubuntu0.1.md) | Jan 16, 2026 | | Linux | expat almalinux 8 | 2.2.5-16.el8_10 | [ALSA-2024:9502](https://patchblox.com/security/data/fix/linux/alsa-2024-9502.md) | Nov 13, 2024 | | Linux | expat almalinux 9 | 2.5.0-3.el9_5.1 | [ALSA-2024:9541](https://patchblox.com/security/data/fix/linux/alsa-2024-9541.md) | Nov 13, 2024 | | Linux | expat amzn 2023 | 2.6.3-1.amzn2023.0.2 | [ALAS2023-2025-793](https://patchblox.com/security/data/fix/linux/alas2023-2025-793.md) | Jan 6, 2025 | | Linux | expat ol 8 | 0:2.2.5-16.0.1.el8_10 | [ELSA-2024-9502](https://patchblox.com/security/data/fix/linux/elsa-2024-9502.md) | Nov 13, 2024 | | Linux | expat ol 9 | 0:2.5.0-3.el9_5.1 | [ELSA-2024-9541](https://patchblox.com/security/data/fix/linux/elsa-2024-9541.md) | Nov 18, 2024 | | Linux | expat opensuse-leap 15.6 | 2.4.4-150400.3.25.1 | [SUSE-SU-2024:4035-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4035-1.md) | Nov 18, 2024 | | Linux | expat rocky 8 | 0:2.2.5-16.el8_10 | [RLSA-2024:9502](https://patchblox.com/security/data/fix/linux/rlsa-2024-9502.md) | Nov 19, 2024 | | Linux | expat sles 15.6 | 2.4.4-150400.3.25.1 | [SUSE-SU-2024:4035-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4035-1.md) | Nov 18, 2024 | | Linux | expat-debuginfo amzn 2023 | 2.6.3-1.amzn2023.0.2 | [ALAS2023-2025-793](https://patchblox.com/security/data/fix/linux/alas2023-2025-793.md) | Jan 6, 2025 | | Linux | expat-debugsource amzn 2023 | 2.6.3-1.amzn2023.0.2 | [ALAS2023-2025-793](https://patchblox.com/security/data/fix/linux/alas2023-2025-793.md) | Jan 6, 2025 | | Linux | expat-devel RHEL 8 | 0:2.2.5-16.el8_10 | [RHSA-2024:9502](https://patchblox.com/security/data/fix/linux/rhsa-2024-9502.md) | Nov 13, 2024 | | Linux | expat-devel RHEL 9 | 0:2.5.0-3.el9_5.1 | [RHSA-2024:9541](https://patchblox.com/security/data/fix/linux/rhsa-2024-9541.md) | Nov 13, 2024 | | Linux | expat-devel almalinux 8 | 2.2.5-16.el8_10 | [ALSA-2024:9502](https://patchblox.com/security/data/fix/linux/alsa-2024-9502.md) | Nov 13, 2024 | | Linux | expat-devel almalinux 9 | 2.5.0-3.el9_5.1 | [ALSA-2024:9541](https://patchblox.com/security/data/fix/linux/alsa-2024-9541.md) | Nov 13, 2024 | | Linux | expat-devel amzn 2023 | 2.6.3-1.amzn2023.0.2 | [ALAS2023-2025-793](https://patchblox.com/security/data/fix/linux/alas2023-2025-793.md) | Jan 6, 2025 | | Linux | expat-devel ol 8 | 0:2.2.5-16.0.1.el8_10 | [ELSA-2024-9502](https://patchblox.com/security/data/fix/linux/elsa-2024-9502.md) | Nov 13, 2024 | | Linux | expat-devel ol 9 | 0:2.5.0-3.el9_5.1 | [ELSA-2024-9541](https://patchblox.com/security/data/fix/linux/elsa-2024-9541.md) | Nov 18, 2024 | | Linux | expat-static amzn 2023 | 2.6.3-1.amzn2023.0.2 | [ALAS2023-2025-793](https://patchblox.com/security/data/fix/linux/alas2023-2025-793.md) | Jan 6, 2025 | | Linux | libexpat1 Ubuntu 18.04.6 LTS (bionic) | 2.2.5-3ubuntu0.9+esm2 | [libexpat1 2.2.5-3ubuntu0.9+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libexpat1-2.2.5-3ubuntu0.9-esm2.md) | Oct 26, 2024 | | Linux | libexpat1 Ubuntu 20.04 LTS (focal) | 2.2.9-1ubuntu0.8 | [libexpat1 2.2.9-1ubuntu0.8](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libexpat1-2.2.9-1ubuntu0.8.md) | Oct 26, 2024 | | Linux | libexpat1 Ubuntu 22.04.1 LTS (jammy) | 2.4.7-1ubuntu0.5 | [libexpat1 2.4.7-1ubuntu0.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libexpat1-2.4.7-1ubuntu0.5.md) | Oct 26, 2024 | | Linux | libexpat1 Ubuntu 24.04.5 LTS (noble) | 2.6.1-2ubuntu0.2 | [libexpat1 2.6.1-2ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libexpat1-2.6.1-2ubuntu0.2.md) | Oct 26, 2024 | | Linux | libexpat1 Ubuntu 24.10 (oracular) | 2.6.2-2ubuntu0.1 | [libexpat1 2.6.2-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libexpat1-2.6.2-2ubuntu0.1.md) | Jan 16, 2026 | | Linux | mozjs115 opensuse-leap 15.6 | 115.4.0-150600.3.6.1 | [SUSE-SU-2024:4411-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4411-1.md) | Dec 23, 2024 | | Linux | mozjs115 sles 15.6 | 115.4.0-150600.3.6.1 | [SUSE-SU-2024:4411-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4411-1.md) | Dec 23, 2024 | | Linux | mozjs52 opensuse-leap 15.6 | 52.6.0-150000.3.9.1 | [SUSE-SU-2025:4512-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4512-1.md) | Dec 23, 2025 | | Linux | mozjs52 sles 15.7 | 52.6.0-150000.3.9.1 | [SUSE-SU-2025:4512-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4512-1.md) | Dec 23, 2025 | | Linux | mozjs60 opensuse-leap 15.6 | 60.9.0-150200.6.8.1 | [SUSE-SU-2026:0044-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0044-1.md) | Jan 6, 2026 | | Linux | mozjs60 sles 15.7 | 60.9.0-150200.6.8.1 | [SUSE-SU-2026:0044-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0044-1.md) | Jan 6, 2026 | | Linux | mozjs78 opensuse-leap 15.6 | 78.15.0-150400.3.11.1 | [SUSE-SU-2024:4412-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4412-1.md) | Dec 23, 2024 | | Linux | mozjs78 sles 15.6 | 78.15.0-150400.3.11.1 | [SUSE-SU-2024:4412-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4412-1.md) | Dec 23, 2024 | | Linux | python3-wxPython opensuse-leap 15.6 | 4.1.1-150400.10.1 | [SUSE-SU-2024:3997-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3997-1.md) | Nov 15, 2024 | | Linux | python3-wxPython sles 15.6 | 4.1.1-150400.10.1 | [SUSE-SU-2024:3997-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3997-1.md) | Nov 15, 2024 | | Linux | python311-wxPython opensuse-leap 15.6 | 4.1.1-150400.3.8.1 | [SUSE-SU-2024:3964-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3964-1.md) | Nov 9, 2024 | --- Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.