Описание
Security update for perl-XML-LibXML
This update for perl-XML-LibXML fixes the following issues:
Security issue fixed:
- CVE-2017-10672: Fix use-after-free that allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call (bsc#1046848).
Список пакетов
SUSE Linux Enterprise Desktop 12 SP2
perl-XML-LibXML-2.0019-6.3.5
SUSE Linux Enterprise Desktop 12 SP3
perl-XML-LibXML-2.0019-6.3.5
SUSE Linux Enterprise Server 12 SP2
perl-XML-LibXML-2.0019-6.3.5
SUSE Linux Enterprise Server 12 SP3
perl-XML-LibXML-2.0019-6.3.5
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
perl-XML-LibXML-2.0019-6.3.5
SUSE Linux Enterprise Server for SAP Applications 12 SP2
perl-XML-LibXML-2.0019-6.3.5
SUSE Linux Enterprise Server for SAP Applications 12 SP3
perl-XML-LibXML-2.0019-6.3.5
Ссылки
- Link for SUSE-SU-2018:0123-1
- E-Mail link for SUSE-SU-2018:0123-1
- SUSE Security Ratings
- SUSE Bug 1046848
- SUSE CVE CVE-2017-10672 page
Описание
Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP2:perl-XML-LibXML-2.0019-6.3.5
SUSE Linux Enterprise Desktop 12 SP3:perl-XML-LibXML-2.0019-6.3.5
SUSE Linux Enterprise Server 12 SP2:perl-XML-LibXML-2.0019-6.3.5
SUSE Linux Enterprise Server 12 SP3:perl-XML-LibXML-2.0019-6.3.5
Ссылки
- CVE-2017-10672
- SUSE Bug 1046848
- SUSE Bug 1069732