portage-ng / portage / dev-lang / spidermonkey / 128.14.0
portage-ng glsa
3 advisories reference dev-lang/spidermonkey · none place version 128.14.0 in a vulnerable range
▸ GLSA 202509-02 Spidermonkey: Multiple Vulnerabilities this version unaffected high local and remote 2025-09-17

Multiple vulnerabilities have been discovered in Spidermonkey, the worst of which could lead to execution of arbitrary code.

Announced
2025-09-17
Revised
2025-09-17
Access
local and remote
Bugs
#945052 #948115 #953023
Advisory
https://security.gentoo.org/glsa/202509-02

Affected packages

PackageArchVulnerableUnaffected
dev-lang/spidermonkey*< 128.9.0>= 128.9.0

Background

SpiderMonkey is Mozilla’s JavaScript and WebAssembly Engine, used in Firefox, Servo and various other projects. It is written in C++, Rust and JavaScript. You can embed it into C++ and Rust projects, and it can be run as a stand-alone shell.

Description

Multiple vulnerabilities have been discovered in Spidermonkey. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Spidermonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-lang/spidermonkey-128.9.0"

References

▸ GLSA 202505-08 Spidermonkey: Multiple Vulnerabilities this version unaffected high local and remote 2025-05-14

Multiple vulnerabilities have been discovered in Spidermonkey, the worst of which could lead to execution of arbitrary code.

Announced
2025-05-14
Revised
2025-05-14
Access
local and remote
Bugs
#941171 #942471 #951565
Advisory
https://security.gentoo.org/glsa/202505-08

Affected packages

PackageArchVulnerableUnaffected
dev-lang/spidermonkey*< 128.8.0>= 128.8.0

Background

SpiderMonkey is Mozilla’s JavaScript and WebAssembly Engine, used in Firefox, Servo and various other projects. It is written in C++, Rust and JavaScript. You can embed it into C++ and Rust projects, and it can be run as a stand-alone shell.

Description

Multiple vulnerabilities have been discovered in Spidermonkey. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Spidermonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-lang/spidermonkey-128.8.0"

References

▸ GLSA 202412-13 Spidermonkey: Multiple Vulnerabilities version not in range high local and remote 2024-12-08

Multiple vulnerabilities have been discovered in Spidermonkey, the worst of which could lead to arbitrary code execution.

Announced
2024-12-08
Revised
2024-12-08
Access
local and remote
Bugs
#935552 #936217 #937469 #941176
Advisory
https://security.gentoo.org/glsa/202412-13

Affected packages

PackageArchVulnerableUnaffected
dev-lang/spidermonkey*< 115.15.0:115>= 115.15.0:115

Background

SpiderMonkey is Mozilla’s JavaScript and WebAssembly Engine, used in Firefox, Servo and various other projects. It is written in C++, Rust and JavaScript. You can embed it into C++ and Rust projects, and it can be run as a stand-alone shell.

Description

Multiple vulnerabilities have been discovered in Spidermonkey. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Spidermonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-lang/spidermonkey-115.15.0:115"

References