Описание
Security update for libxml2
This update for libxml2 fixes the following issues:
Security issues fixed:
- CVE-2017-8872: Out-of-bounds read in htmlParseTryOrFinish. (bsc#1038444)
Список пакетов
SUSE Linux Enterprise Desktop 12 SP2
libxml2-2-2.9.4-46.3.2
libxml2-2-32bit-2.9.4-46.3.2
libxml2-tools-2.9.4-46.3.2
python-libxml2-2.9.4-46.3.2
SUSE Linux Enterprise Desktop 12 SP3
libxml2-2-2.9.4-46.3.2
libxml2-2-32bit-2.9.4-46.3.2
libxml2-tools-2.9.4-46.3.2
python-libxml2-2.9.4-46.3.2
SUSE Linux Enterprise Server 12 SP2
libxml2-2-2.9.4-46.3.2
libxml2-2-32bit-2.9.4-46.3.2
libxml2-doc-2.9.4-46.3.2
libxml2-tools-2.9.4-46.3.2
python-libxml2-2.9.4-46.3.2
SUSE Linux Enterprise Server 12 SP3
libxml2-2-2.9.4-46.3.2
libxml2-2-32bit-2.9.4-46.3.2
libxml2-doc-2.9.4-46.3.2
libxml2-tools-2.9.4-46.3.2
python-libxml2-2.9.4-46.3.2
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
libxml2-2-2.9.4-46.3.2
libxml2-doc-2.9.4-46.3.2
libxml2-tools-2.9.4-46.3.2
python-libxml2-2.9.4-46.3.2
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libxml2-2-2.9.4-46.3.2
libxml2-2-32bit-2.9.4-46.3.2
libxml2-doc-2.9.4-46.3.2
libxml2-tools-2.9.4-46.3.2
python-libxml2-2.9.4-46.3.2
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libxml2-2-2.9.4-46.3.2
libxml2-2-32bit-2.9.4-46.3.2
libxml2-doc-2.9.4-46.3.2
libxml2-tools-2.9.4-46.3.2
python-libxml2-2.9.4-46.3.2
SUSE Linux Enterprise Software Development Kit 12 SP2
libxml2-devel-2.9.4-46.3.2
SUSE Linux Enterprise Software Development Kit 12 SP3
libxml2-devel-2.9.4-46.3.2
Ссылки
- Link for SUSE-SU-2017:2141-1
- E-Mail link for SUSE-SU-2017:2141-1
- SUSE Security Ratings
- SUSE Bug 1038444
- SUSE CVE CVE-2017-8872 page
Описание
The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure.
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP2:libxml2-2-2.9.4-46.3.2
SUSE Linux Enterprise Desktop 12 SP2:libxml2-2-32bit-2.9.4-46.3.2
SUSE Linux Enterprise Desktop 12 SP2:libxml2-tools-2.9.4-46.3.2
SUSE Linux Enterprise Desktop 12 SP2:python-libxml2-2.9.4-46.3.2
Ссылки
- CVE-2017-8872
- SUSE Bug 1038444
- SUSE Bug 1123919