Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:1658-1

Опубликовано: 19 мая 2021
Источник: suse-cvrf

Описание

Security update for libxml2

This update for libxml2 fixes the following issues:

Security issues fixed:

CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel (bsc#1185698)

  • CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess (bsc#1185408).
  • CVE-2021-3517: Fixed a heap based buffer overflow in entities.c:xmlEncodeEntitiesInternal (bsc#1185410).
  • CVE-2021-3516: Fixed a use after free in entities.c:xmlEncodeEntitiesInternal (bsc#1185409).

Список пакетов

Container suse/ltss/sle12.5/sles12sp5:latest
libxml2-2-2.9.4-46.43.1
Container suse/sles12sp3:latest
libxml2-2-2.9.4-46.43.1
Container suse/sles12sp4:latest
libxml2-2-2.9.4-46.43.1
Container suse/sles12sp5:latest
libxml2-2-2.9.4-46.43.1
HPE Helion OpenStack 8
libxml2-2-2.9.4-46.43.1
libxml2-2-32bit-2.9.4-46.43.1
libxml2-doc-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
python-libxml2-2.9.4-46.43.1
Image SLES12-SP4-Azure-BYOS
libxml2-2-2.9.4-46.43.1
Image SLES12-SP4-EC2-HVM-BYOS
libxml2-2-2.9.4-46.43.1
Image SLES12-SP4-GCE-BYOS
libxml2-2-2.9.4-46.43.1
Image SLES12-SP4-SAP-Azure
libxml2-2-2.9.4-46.43.1
Image SLES12-SP4-SAP-Azure-BYOS
libxml2-2-2.9.4-46.43.1
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production
libxml2-2-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production
libxml2-2-2.9.4-46.43.1
libxml2-2-32bit-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
Image SLES12-SP4-SAP-EC2-HVM
libxml2-2-2.9.4-46.43.1
Image SLES12-SP4-SAP-EC2-HVM-BYOS
libxml2-2-2.9.4-46.43.1
Image SLES12-SP4-SAP-GCE
libxml2-2-2.9.4-46.43.1
Image SLES12-SP4-SAP-GCE-BYOS
libxml2-2-2.9.4-46.43.1
Image SLES12-SP5-Azure-BYOS
libxml2-2-2.9.4-46.43.1
Image SLES12-SP5-Azure-Basic-On-Demand
libxml2-2-2.9.4-46.43.1
Image SLES12-SP5-Azure-HPC-BYOS
libxml2-2-2.9.4-46.43.1
Image SLES12-SP5-Azure-HPC-On-Demand
libxml2-2-2.9.4-46.43.1
Image SLES12-SP5-Azure-SAP-BYOS
libxml2-2-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
Image SLES12-SP5-Azure-SAP-On-Demand
libxml2-2-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
Image SLES12-SP5-Azure-Standard-On-Demand
libxml2-2-2.9.4-46.43.1
Image SLES12-SP5-EC2-BYOS
libxml2-2-2.9.4-46.43.1
Image SLES12-SP5-EC2-ECS-On-Demand
libxml2-2-2.9.4-46.43.1
Image SLES12-SP5-EC2-On-Demand
libxml2-2-2.9.4-46.43.1
Image SLES12-SP5-EC2-SAP-BYOS
libxml2-2-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
Image SLES12-SP5-EC2-SAP-On-Demand
libxml2-2-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
Image SLES12-SP5-GCE-BYOS
libxml2-2-2.9.4-46.43.1
Image SLES12-SP5-GCE-On-Demand
libxml2-2-2.9.4-46.43.1
Image SLES12-SP5-GCE-SAP-BYOS
libxml2-2-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
Image SLES12-SP5-GCE-SAP-On-Demand
libxml2-2-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
Image SLES12-SP5-OCI-BYOS-BYOS
libxml2-2-2.9.4-46.43.1
Image SLES12-SP5-OCI-BYOS-SAP-BYOS
libxml2-2-2.9.4-46.43.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
libxml2-2-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
libxml2-2-2.9.4-46.43.1
libxml2-2-32bit-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
SUSE Linux Enterprise Server 12 SP2-BCL
libxml2-2-2.9.4-46.43.1
libxml2-2-32bit-2.9.4-46.43.1
libxml2-doc-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
python-libxml2-2.9.4-46.43.1
SUSE Linux Enterprise Server 12 SP3-BCL
libxml2-2-2.9.4-46.43.1
libxml2-2-32bit-2.9.4-46.43.1
libxml2-doc-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
python-libxml2-2.9.4-46.43.1
SUSE Linux Enterprise Server 12 SP3-LTSS
libxml2-2-2.9.4-46.43.1
libxml2-2-32bit-2.9.4-46.43.1
libxml2-doc-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
python-libxml2-2.9.4-46.43.1
SUSE Linux Enterprise Server 12 SP4-LTSS
libxml2-2-2.9.4-46.43.1
libxml2-2-32bit-2.9.4-46.43.1
libxml2-doc-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
python-libxml2-2.9.4-46.43.1
SUSE Linux Enterprise Server 12 SP5
libxml2-2-2.9.4-46.43.1
libxml2-2-32bit-2.9.4-46.43.1
libxml2-doc-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
python-libxml2-2.9.4-46.43.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libxml2-2-2.9.4-46.43.1
libxml2-2-32bit-2.9.4-46.43.1
libxml2-doc-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
python-libxml2-2.9.4-46.43.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libxml2-2-2.9.4-46.43.1
libxml2-2-32bit-2.9.4-46.43.1
libxml2-doc-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
python-libxml2-2.9.4-46.43.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libxml2-2-2.9.4-46.43.1
libxml2-2-32bit-2.9.4-46.43.1
libxml2-doc-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
python-libxml2-2.9.4-46.43.1
SUSE Linux Enterprise Software Development Kit 12 SP5
libxml2-devel-2.9.4-46.43.1
SUSE OpenStack Cloud 8
libxml2-2-2.9.4-46.43.1
libxml2-2-32bit-2.9.4-46.43.1
libxml2-doc-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
python-libxml2-2.9.4-46.43.1
SUSE OpenStack Cloud 9
libxml2-2-2.9.4-46.43.1
libxml2-2-32bit-2.9.4-46.43.1
libxml2-doc-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
python-libxml2-2.9.4-46.43.1
SUSE OpenStack Cloud Crowbar 8
libxml2-2-2.9.4-46.43.1
libxml2-2-32bit-2.9.4-46.43.1
libxml2-doc-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
python-libxml2-2.9.4-46.43.1
SUSE OpenStack Cloud Crowbar 9
libxml2-2-2.9.4-46.43.1
libxml2-2-32bit-2.9.4-46.43.1
libxml2-doc-2.9.4-46.43.1
libxml2-tools-2.9.4-46.43.1
python-libxml2-2.9.4-46.43.1

Ссылки

Описание

There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.

Затронутые продукты
Container suse/ltss/sle12.5/sles12sp5:latest:libxml2-2-2.9.4-46.43.1
Container suse/sles12sp3:latest:libxml2-2-2.9.4-46.43.1
Container suse/sles12sp4:latest:libxml2-2-2.9.4-46.43.1
Container suse/sles12sp5:latest:libxml2-2-2.9.4-46.43.1
Ссылки

Описание

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.

Затронутые продукты
Container suse/ltss/sle12.5/sles12sp5:latest:libxml2-2-2.9.4-46.43.1
Container suse/sles12sp3:latest:libxml2-2-2.9.4-46.43.1
Container suse/sles12sp4:latest:libxml2-2-2.9.4-46.43.1
Container suse/sles12sp5:latest:libxml2-2-2.9.4-46.43.1
Ссылки

Описание

There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

Затронутые продукты
Container suse/ltss/sle12.5/sles12sp5:latest:libxml2-2-2.9.4-46.43.1
Container suse/sles12sp3:latest:libxml2-2-2.9.4-46.43.1
Container suse/sles12sp4:latest:libxml2-2-2.9.4-46.43.1
Container suse/sles12sp5:latest:libxml2-2-2.9.4-46.43.1
Ссылки

Описание

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.

Затронутые продукты
Container suse/ltss/sle12.5/sles12sp5:latest:libxml2-2-2.9.4-46.43.1
Container suse/sles12sp3:latest:libxml2-2-2.9.4-46.43.1
Container suse/sles12sp4:latest:libxml2-2-2.9.4-46.43.1
Container suse/sles12sp5:latest:libxml2-2-2.9.4-46.43.1
Ссылки