Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:1524-1

Опубликовано: 05 мая 2021
Источник: suse-cvrf

Описание

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess (bsc#1185408).
  • CVE-2021-3517: Fixed a heap based buffer overflow in entities.c:xmlEncodeEntitiesInternal (bsc#1185410).
  • CVE-2021-3516: Fixed a use after free in entities.c:xmlEncodeEntitiesInternal (bsc#1185409).

Список пакетов

Container suse/ltss/sle12.5/sles12sp5:latest
libxml2-2-2.9.4-46.40.1
Container suse/sles12sp3:latest
libxml2-2-2.9.4-46.40.1
Container suse/sles12sp4:latest
libxml2-2-2.9.4-46.40.1
Container suse/sles12sp5:latest
libxml2-2-2.9.4-46.40.1
Image SLES12-SP4-Azure-BYOS
libxml2-2-2.9.4-46.40.1
Image SLES12-SP4-EC2-HVM-BYOS
libxml2-2-2.9.4-46.40.1
Image SLES12-SP4-GCE-BYOS
libxml2-2-2.9.4-46.40.1
Image SLES12-SP4-SAP-Azure
libxml2-2-2.9.4-46.40.1
Image SLES12-SP4-SAP-Azure-BYOS
libxml2-2-2.9.4-46.40.1
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production
libxml2-2-2.9.4-46.40.1
libxml2-tools-2.9.4-46.40.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production
libxml2-2-2.9.4-46.40.1
libxml2-2-32bit-2.9.4-46.40.1
libxml2-tools-2.9.4-46.40.1
Image SLES12-SP4-SAP-EC2-HVM
libxml2-2-2.9.4-46.40.1
Image SLES12-SP4-SAP-EC2-HVM-BYOS
libxml2-2-2.9.4-46.40.1
Image SLES12-SP4-SAP-GCE
libxml2-2-2.9.4-46.40.1
Image SLES12-SP4-SAP-GCE-BYOS
libxml2-2-2.9.4-46.40.1
Image SLES12-SP5-Azure-BYOS
libxml2-2-2.9.4-46.40.1
Image SLES12-SP5-Azure-Basic-On-Demand
libxml2-2-2.9.4-46.40.1
Image SLES12-SP5-Azure-HPC-BYOS
libxml2-2-2.9.4-46.40.1
Image SLES12-SP5-Azure-HPC-On-Demand
libxml2-2-2.9.4-46.40.1
Image SLES12-SP5-Azure-SAP-BYOS
libxml2-2-2.9.4-46.40.1
libxml2-tools-2.9.4-46.40.1
Image SLES12-SP5-Azure-SAP-On-Demand
libxml2-2-2.9.4-46.40.1
libxml2-tools-2.9.4-46.40.1
Image SLES12-SP5-Azure-Standard-On-Demand
libxml2-2-2.9.4-46.40.1
Image SLES12-SP5-EC2-BYOS
libxml2-2-2.9.4-46.40.1
Image SLES12-SP5-EC2-ECS-On-Demand
libxml2-2-2.9.4-46.40.1
Image SLES12-SP5-EC2-On-Demand
libxml2-2-2.9.4-46.40.1
Image SLES12-SP5-EC2-SAP-BYOS
libxml2-2-2.9.4-46.40.1
libxml2-tools-2.9.4-46.40.1
Image SLES12-SP5-EC2-SAP-On-Demand
libxml2-2-2.9.4-46.40.1
libxml2-tools-2.9.4-46.40.1
Image SLES12-SP5-GCE-BYOS
libxml2-2-2.9.4-46.40.1
Image SLES12-SP5-GCE-On-Demand
libxml2-2-2.9.4-46.40.1
Image SLES12-SP5-GCE-SAP-BYOS
libxml2-2-2.9.4-46.40.1
libxml2-tools-2.9.4-46.40.1
Image SLES12-SP5-GCE-SAP-On-Demand
libxml2-2-2.9.4-46.40.1
libxml2-tools-2.9.4-46.40.1
Image SLES12-SP5-OCI-BYOS-BYOS
libxml2-2-2.9.4-46.40.1
Image SLES12-SP5-OCI-BYOS-SAP-BYOS
libxml2-2-2.9.4-46.40.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
libxml2-2-2.9.4-46.40.1
libxml2-tools-2.9.4-46.40.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
libxml2-2-2.9.4-46.40.1
libxml2-2-32bit-2.9.4-46.40.1
libxml2-tools-2.9.4-46.40.1
SUSE Linux Enterprise Server 12 SP5
libxml2-2-2.9.4-46.40.1
libxml2-2-32bit-2.9.4-46.40.1
libxml2-doc-2.9.4-46.40.1
libxml2-tools-2.9.4-46.40.1
python-libxml2-2.9.4-46.40.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libxml2-2-2.9.4-46.40.1
libxml2-2-32bit-2.9.4-46.40.1
libxml2-doc-2.9.4-46.40.1
libxml2-tools-2.9.4-46.40.1
python-libxml2-2.9.4-46.40.1
SUSE Linux Enterprise Software Development Kit 12 SP5
libxml2-devel-2.9.4-46.40.1

Ссылки

Описание

There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.

Затронутые продукты
Container suse/ltss/sle12.5/sles12sp5:latest:libxml2-2-2.9.4-46.40.1
Container suse/sles12sp3:latest:libxml2-2-2.9.4-46.40.1
Container suse/sles12sp4:latest:libxml2-2-2.9.4-46.40.1
Container suse/sles12sp5:latest:libxml2-2-2.9.4-46.40.1
Ссылки

Описание

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.

Затронутые продукты
Container suse/ltss/sle12.5/sles12sp5:latest:libxml2-2-2.9.4-46.40.1
Container suse/sles12sp3:latest:libxml2-2-2.9.4-46.40.1
Container suse/sles12sp4:latest:libxml2-2-2.9.4-46.40.1
Container suse/sles12sp5:latest:libxml2-2-2.9.4-46.40.1
Ссылки

Описание

There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

Затронутые продукты
Container suse/ltss/sle12.5/sles12sp5:latest:libxml2-2-2.9.4-46.40.1
Container suse/sles12sp3:latest:libxml2-2-2.9.4-46.40.1
Container suse/sles12sp4:latest:libxml2-2-2.9.4-46.40.1
Container suse/sles12sp5:latest:libxml2-2-2.9.4-46.40.1
Ссылки