Описание
Security update for raptor
This update for raptor fixes the following issues:
- Fixed a heap overflow vulnerability (bsc#1178593, CVE-2017-18926).
- Update raptor to version 2.0.15
- Made several fixes to Turtle / N-Triples family of parsers and serializers
- Added utility functions for re-entrant sorting of objects and sequences.
- Made other fixes and improvements including fixing reported issues: 0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.
Список пакетов
HPE Helion OpenStack 8
libraptor2-0-2.0.15-5.3.1
SUSE Enterprise Storage 5
libraptor2-0-2.0.15-5.3.1
SUSE Linux Enterprise Server 12 SP2-BCL
libraptor2-0-2.0.15-5.3.1
SUSE Linux Enterprise Server 12 SP2-LTSS
libraptor2-0-2.0.15-5.3.1
SUSE Linux Enterprise Server 12 SP3-BCL
libraptor2-0-2.0.15-5.3.1
SUSE Linux Enterprise Server 12 SP3-LTSS
libraptor2-0-2.0.15-5.3.1
SUSE Linux Enterprise Server 12 SP4-LTSS
libraptor2-0-2.0.15-5.3.1
SUSE Linux Enterprise Server 12 SP5
libraptor2-0-2.0.15-5.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libraptor2-0-2.0.15-5.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libraptor2-0-2.0.15-5.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libraptor2-0-2.0.15-5.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libraptor2-0-2.0.15-5.3.1
SUSE Linux Enterprise Software Development Kit 12 SP5
libraptor-devel-2.0.15-5.3.1
raptor-2.0.15-5.3.1
SUSE Linux Enterprise Workstation Extension 12 SP5
raptor-2.0.15-5.3.1
SUSE OpenStack Cloud 7
libraptor2-0-2.0.15-5.3.1
SUSE OpenStack Cloud 8
libraptor2-0-2.0.15-5.3.1
SUSE OpenStack Cloud 9
libraptor2-0-2.0.15-5.3.1
SUSE OpenStack Cloud Crowbar 8
libraptor2-0-2.0.15-5.3.1
SUSE OpenStack Cloud Crowbar 9
libraptor2-0-2.0.15-5.3.1
Ссылки
- Link for SUSE-SU-2020:3351-1
- E-Mail link for SUSE-SU-2020:3351-1
- SUSE Security Ratings
- SUSE Bug 1178593
- SUSE CVE CVE-2017-18926 page
Описание
raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows (sometimes seen in raptor_qname_format_as_xml).
Затронутые продукты
HPE Helion OpenStack 8:libraptor2-0-2.0.15-5.3.1
SUSE Enterprise Storage 5:libraptor2-0-2.0.15-5.3.1
SUSE Linux Enterprise Server 12 SP2-BCL:libraptor2-0-2.0.15-5.3.1
SUSE Linux Enterprise Server 12 SP2-LTSS:libraptor2-0-2.0.15-5.3.1
Ссылки
- CVE-2017-18926
- SUSE Bug 1178593
- SUSE Bug 1178784
- SUSE Bug 1178903
- SUSE Bug 1183914