SUSE-SU-2022:3871-1

Опубликовано: 04 нояб. 2022

Источник: suse-cvrf

Описание

Security update for libxml2

This update for libxml2 fixes the following issues:

CVE-2016-3709: Fixed possible XSS vulnerability (bsc#1201978).
CVE-2022-40303: Fixed integer overflows with XML_PARSE_HUGE (bsc#1204366).
CVE-2022-40304: Fixed dict corruption caused by entity reference cycles (bsc#1204367).

Список пакетов

Container bci/bci-init:15.3

libxml2-2-2.9.7-150000.3.51.1

Container bci/node:12

libxml2-2-2.9.7-150000.3.51.1

Container bci/python:3

libxml2-2-2.9.7-150000.3.51.1

Container caasp/v4/cilium-operator:1.6.6

libxml2-2-2.9.7-150000.3.51.1

Container caasp/v4/cilium:1.6.6

libxml2-2-2.9.7-150000.3.51.1

Container caasp/v4/helm-tiller:2.16.12

libxml2-2-2.9.7-150000.3.51.1

Container ses/7.1/ceph/grafana:latest

libxml2-2-2.9.7-150000.3.51.1

Container ses/7.1/ceph/haproxy:latest

libxml2-2-2.9.7-150000.3.51.1

Container ses/7.1/ceph/keepalived:latest

libxml2-2-2.9.7-150000.3.51.1

Container ses/7.1/ceph/prometheus-alertmanager:latest

libxml2-2-2.9.7-150000.3.51.1

Container ses/7.1/ceph/prometheus-node-exporter:latest

libxml2-2-2.9.7-150000.3.51.1

Container ses/7.1/ceph/prometheus-server:latest

libxml2-2-2.9.7-150000.3.51.1

Container ses/7.1/ceph/prometheus-snmp_notifier:latest

libxml2-2-2.9.7-150000.3.51.1

Container ses/7.1/cephcsi/cephcsi:latest

libxml2-2-2.9.7-150000.3.51.1

Container ses/7.1/cephcsi/csi-attacher:v4.1.0

libxml2-2-2.9.7-150000.3.51.1

Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0

libxml2-2-2.9.7-150000.3.51.1

Container ses/7.1/cephcsi/csi-provisioner:v3.4.0

libxml2-2-2.9.7-150000.3.51.1

Container ses/7.1/cephcsi/csi-resizer:v1.7.0

libxml2-2-2.9.7-150000.3.51.1

Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1

libxml2-2-2.9.7-150000.3.51.1

Container ses/7.1/rook/ceph:latest

libxml2-2-2.9.7-150000.3.51.1

Container suse/ltss/sle15.3/bci-base:latest

libxml2-2-2.9.7-150000.3.51.1

Container suse/sle-micro-rancher/5.2:latest

libxml2-2-2.9.7-150000.3.51.1

Container suse/sle-micro/5.1/toolbox:latest

libxml2-2-2.9.7-150000.3.51.1

Container suse/sle-micro/5.2/toolbox:latest

libxml2-2-2.9.7-150000.3.51.1

Container suse/sle15:15.0

libxml2-2-2.9.7-150000.3.51.1

Container suse/sle15:15.1

libxml2-2-2.9.7-150000.3.51.1

Container suse/sle15:15.2

libxml2-2-2.9.7-150000.3.51.1

Container suse/sle15:15.3

libxml2-2-2.9.7-150000.3.51.1

Container trento/trento-db:latest

libxml2-2-2.9.7-150000.3.51.1

Container trento/trento-runner:latest

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP1-SAPCAL-Azure

libxml2-2-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP1-SAPCAL-EC2-HVM

libxml2-2-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP1-SAPCAL-GCE

libxml2-2-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP2-BYOS-Azure

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP2-BYOS-EC2-HVM

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP2-BYOS-GCE

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP2-HPC-BYOS-Azure

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP2-HPC-BYOS-EC2-HVM

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP2-SAP-Azure

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP2-SAP-BYOS-Azure

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP2-SAP-BYOS-EC2-HVM

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP2-SAP-BYOS-GCE

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP2-SAP-EC2-HVM

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP2-SAP-GCE

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP3-BYOS-Azure

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP3-BYOS-EC2-HVM

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP3-BYOS-GCE

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP3-CHOST-BYOS-Aliyun

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP3-CHOST-BYOS-Azure

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP3-CHOST-BYOS-EC2

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP3-CHOST-BYOS-GCE

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP3-HPC-BYOS-Azure

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP3-HPC-BYOS-EC2-HVM

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP3-HPC-BYOS-GCE

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

libxml2-2-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

libxml2-2-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

libxml2-2-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

Image SLES15-SP3-Micro-5-1-BYOS-Azure

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP3-Micro-5-1-BYOS-GCE

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP3-Micro-5-2-BYOS-Azure

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP3-Micro-5-2-BYOS-GCE

libxml2-2-2.9.7-150000.3.51.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP3-SAP-BYOS-Azure

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP3-SAP-BYOS-GCE

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP3-SAPCAL-Azure

libxml2-2-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP3-SAPCAL-EC2-HVM

libxml2-2-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

Image SLES15-SP3-SAPCAL-GCE

libxml2-2-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

SUSE Enterprise Storage 6

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Enterprise Storage 7

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Linux Enterprise High Performance Computing 15-ESPOS

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Linux Enterprise High Performance Computing 15-LTSS

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Linux Enterprise Micro 5.1

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

SUSE Linux Enterprise Micro 5.2

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Linux Enterprise Module for Basesystem 15 SP3

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Linux Enterprise Module for Python 2 15 SP3

python2-libxml2-python-2.9.7-150000.3.51.1

SUSE Linux Enterprise Server 15 SP1-BCL

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Linux Enterprise Server 15 SP1-LTSS

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Linux Enterprise Server 15 SP2-BCL

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Linux Enterprise Server 15 SP2-LTSS

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Linux Enterprise Server 15-LTSS

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Linux Enterprise Server for SAP Applications 15

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Linux Enterprise Server for SAP Applications 15 SP1

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Manager Proxy 4.1

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Manager Retail Branch Server 4.1

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

SUSE Manager Server 4.1

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

openSUSE Leap 15.3

libxml2-2-2.9.7-150000.3.51.1

libxml2-2-32bit-2.9.7-150000.3.51.1

libxml2-devel-2.9.7-150000.3.51.1

libxml2-devel-32bit-2.9.7-150000.3.51.1

libxml2-doc-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python2-libxml2-python-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

openSUSE Leap 15.4

python3-libxml2-python-2.9.7-150000.3.51.1

openSUSE Leap Micro 5.2

libxml2-2-2.9.7-150000.3.51.1

libxml2-tools-2.9.7-150000.3.51.1

python3-libxml2-python-2.9.7-150000.3.51.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20223871-1/
Link for SUSE-SU-2022:3871-1
https://lists.suse.com/pipermail/sle-security-updates/2022-November/012813.html
E-Mail link for SUSE-SU-2022:3871-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1201978
SUSE Bug 1201978
https://bugzilla.suse.com/1204366
SUSE Bug 1204366
https://bugzilla.suse.com/1204367
SUSE Bug 1204367
https://www.suse.com/security/cve/CVE-2016-3709/
SUSE CVE CVE-2016-3709 page
https://www.suse.com/security/cve/CVE-2022-40303/
SUSE CVE CVE-2022-40303 page
https://www.suse.com/security/cve/CVE-2022-40304/
SUSE CVE CVE-2022-40304 page

Описание

Possible cross-site scripting vulnerability in libxml after commit 960f0e2.

Затронутые продукты

Container bci/bci-init:15.3:libxml2-2-2.9.7-150000.3.51.1

Container bci/node:12:libxml2-2-2.9.7-150000.3.51.1

Container bci/python:3:libxml2-2-2.9.7-150000.3.51.1

Container caasp/v4/cilium-operator:1.6.6:libxml2-2-2.9.7-150000.3.51.1

Ссылки

https://www.suse.com/security/cve/CVE-2016-3709.html
CVE-2016-3709
https://bugzilla.suse.com/1201978
SUSE Bug 1201978

Описание

An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.

Затронутые продукты

Container bci/bci-init:15.3:libxml2-2-2.9.7-150000.3.51.1

Container bci/node:12:libxml2-2-2.9.7-150000.3.51.1

Container bci/python:3:libxml2-2-2.9.7-150000.3.51.1

Container caasp/v4/cilium-operator:1.6.6:libxml2-2-2.9.7-150000.3.51.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-40303.html
CVE-2022-40303
https://bugzilla.suse.com/1204366
SUSE Bug 1204366
https://bugzilla.suse.com/1204807
SUSE Bug 1204807
https://bugzilla.suse.com/1205549
SUSE Bug 1205549
https://bugzilla.suse.com/1206241
SUSE Bug 1206241
https://bugzilla.suse.com/1206248
SUSE Bug 1206248

Описание

An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.

Затронутые продукты

Container bci/bci-init:15.3:libxml2-2-2.9.7-150000.3.51.1

Container bci/node:12:libxml2-2-2.9.7-150000.3.51.1

Container bci/python:3:libxml2-2-2.9.7-150000.3.51.1

Container caasp/v4/cilium-operator:1.6.6:libxml2-2-2.9.7-150000.3.51.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-40304.html
CVE-2022-40304
https://bugzilla.suse.com/1204367
SUSE Bug 1204367
https://bugzilla.suse.com/1205069
SUSE Bug 1205069
https://bugzilla.suse.com/1205549
SUSE Bug 1205549
https://bugzilla.suse.com/1206241
SUSE Bug 1206241
https://bugzilla.suse.com/1206248
SUSE Bug 1206248
https://bugzilla.suse.com/1208343
SUSE Bug 1208343