SUSE-SU-2024:0555-1

Опубликовано: 20 фев. 2024

Источник: suse-cvrf

Описание

Security update for libxml2

This update for libxml2 fixes the following issues:

CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).

Список пакетов

Container bci/bci-sle15-kernel-module-devel:15.5

libxml2-2-2.10.3-150500.5.14.1

Container bci/bci-sle15-kernel-module-devel:latest

libxml2-2-2.10.3-150500.5.14.1

Container bci/kiwi:latest

libxml2-2-2.10.3-150500.5.14.1

libxml2-devel-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Container bci/php-apache:latest

libxml2-2-2.10.3-150500.5.14.1

Container bci/php-fpm:latest

libxml2-2-2.10.3-150500.5.14.1

Container bci/php:latest

libxml2-2-2.10.3-150500.5.14.1

Container bci/spack:latest

libxml2-2-2.10.3-150500.5.14.1

Container containers/apache-pulsar:3.3

libxml2-2-2.10.3-150500.5.14.1

Container containers/apache-tomcat:10.1-openjdk11

libxml2-2-2.10.3-150500.5.14.1

Container containers/apache-tomcat:10.1-openjdk17

libxml2-2-2.10.3-150500.5.14.1

Container containers/apache-tomcat:10.1-openjdk21

libxml2-2-2.10.3-150500.5.14.1

Container containers/apache-tomcat:9-openjdk11

libxml2-2-2.10.3-150500.5.14.1

Container containers/apache-tomcat:9-openjdk17

libxml2-2-2.10.3-150500.5.14.1

Container containers/apache-tomcat:9-openjdk21

libxml2-2-2.10.3-150500.5.14.1

Container containers/apache-tomcat:9-openjdk8

libxml2-2-2.10.3-150500.5.14.1

Container containers/open-webui:0

libxml2-2-2.10.3-150500.5.14.1

Container containers/pytorch:2-nvidia

libxml2-2-2.10.3-150500.5.14.1

Container containers/pytorch:2.5.0

libxml2-2-2.10.3-150500.5.14.1

Container rancher/seedimage-builder:latest

libxml2-2-2.10.3-150500.5.14.1

Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest

libxml2-2-2.10.3-150500.5.14.1

Container suse/ltss/sle15.5/sle15:latest

libxml2-2-2.10.3-150500.5.14.1

Container suse/manager/5.0/x86_64/proxy-httpd:latest

libxml2-2-2.10.3-150500.5.14.1

python3-libxml2-2.10.3-150500.5.14.1

Container suse/manager/5.0/x86_64/proxy-salt-broker:latest

libxml2-2-2.10.3-150500.5.14.1

Container suse/manager/5.0/x86_64/proxy-squid:latest

libxml2-2-2.10.3-150500.5.14.1

Container suse/manager/5.0/x86_64/server-migration-14-16:latest

libxml2-2-2.10.3-150500.5.14.1

Container suse/manager/5.0/x86_64/server:latest

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

python3-libxml2-2.10.3-150500.5.14.1

Container suse/mariadb:latest

libxml2-2-2.10.3-150500.5.14.1

Container suse/nginx:latest

libxml2-2-2.10.3-150500.5.14.1

Container suse/pcp:latest

libxml2-2-2.10.3-150500.5.14.1

Container suse/postgres:15

libxml2-2-2.10.3-150500.5.14.1

Container suse/postgres:16

libxml2-2-2.10.3-150500.5.14.1

Container suse/postgres:latest

libxml2-2-2.10.3-150500.5.14.1

Container suse/rmt-mariadb:latest

libxml2-2-2.10.3-150500.5.14.1

Container suse/rmt-server:latest

libxml2-2-2.10.3-150500.5.14.1

Container suse/sle-micro/5.5/toolbox:latest

libxml2-2-2.10.3-150500.5.14.1

Container suse/sle-micro/5.5:latest

libxml2-2-2.10.3-150500.5.14.1

Container suse/sle-micro/base-5.5:latest

libxml2-2-2.10.3-150500.5.14.1

Container suse/sle-micro/kvm-5.5:latest

libxml2-2-2.10.3-150500.5.14.1

Container suse/sle-micro/rt-5.5:latest

libxml2-2-2.10.3-150500.5.14.1

Container suse/sle15:15.5

libxml2-2-2.10.3-150500.5.14.1

Container suse/sle15:15.6

libxml2-2-2.10.3-150500.5.14.1

Container suse/sles/15.6/cdi-importer:1.58.0

libxml2-2-2.10.3-150500.5.14.1

Container suse/sles/15.6/cdi-uploadserver:1.58.0

libxml2-2-2.10.3-150500.5.14.1

Container suse/sles/15.6/libguestfs-tools:1.1.1

libxml2-2-2.10.3-150500.5.14.1

Container suse/sles/15.6/virt-launcher:1.1.1

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Azure-3P

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Azure-Basic

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Azure-Standard

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-BYOS-Azure

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-BYOS-EC2

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-BYOS-GCE

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-CHOST-BYOS-Aliyun

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-CHOST-BYOS-Azure

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-CHOST-BYOS-EC2

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-CHOST-BYOS-GCE

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-CHOST-BYOS-GDC

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-EC2

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-GCE

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-HPC-Azure

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-HPC-BYOS-Azure

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-HPC-BYOS-EC2

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-HPC-BYOS-GCE

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Hardened-BYOS-Azure

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Hardened-BYOS-EC2

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Hardened-BYOS-GCE

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Manager-Server-5-0

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-Manager-Server-5-0-Azure-llc

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-Manager-Server-5-0-Azure-ltd

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-Manager-Server-5-0-BYOS

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Manager-Server-5-0-EC2-llc

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Manager-Server-5-0-EC2-ltd

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Micro-5-5

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Micro-5-5-Azure

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Micro-5-5-BYOS

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Micro-5-5-BYOS-Azure

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Micro-5-5-BYOS-EC2

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Micro-5-5-BYOS-GCE

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Micro-5-5-EC2

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-Micro-5-5-GCE

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP5-SAP-Azure-3P

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-SAP-BYOS-Azure

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-SAP-BYOS-EC2

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-SAP-BYOS-GCE

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-SAP-Hardened-Azure

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-SAP-Hardened-GCE

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-SAPCAL-Azure

libxml2-2-2.10.3-150500.5.14.1

libxml2-devel-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-SAPCAL-EC2

libxml2-2-2.10.3-150500.5.14.1

libxml2-devel-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP5-SAPCAL-GCE

libxml2-2-2.10.3-150500.5.14.1

libxml2-devel-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-Azure-Basic

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-Azure-Standard

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-BYOS

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-BYOS-Azure

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-BYOS-EC2

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-BYOS-GCE

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-CHOST-BYOS

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-CHOST-BYOS-Azure

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-CHOST-BYOS-EC2

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-CHOST-BYOS-GCE

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-CHOST-BYOS-GDC

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-EC2

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-EC2-ECS-HVM

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-GCE

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-HPC

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-HPC-Azure

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-HPC-BYOS

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-HPC-BYOS-Azure

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-HPC-BYOS-EC2

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-HPC-BYOS-GCE

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-HPC-EC2

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-HPC-GCE

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-Hardened-BYOS

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-Hardened-BYOS-Azure

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-Hardened-BYOS-EC2

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-Hardened-BYOS-GCE

libxml2-2-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP

libxml2-2-2.10.3-150500.5.14.1

libxml2-devel-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-Azure

libxml2-2-2.10.3-150500.5.14.1

libxml2-devel-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-BYOS

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-BYOS-Azure

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-BYOS-EC2

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-BYOS-GCE

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-EC2

libxml2-2-2.10.3-150500.5.14.1

libxml2-devel-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-GCE

libxml2-2-2.10.3-150500.5.14.1

libxml2-devel-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-Hardened

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-Hardened-Azure

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-Hardened-BYOS

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-Hardened-EC2

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAP-Hardened-GCE

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAPCAL

libxml2-2-2.10.3-150500.5.14.1

libxml2-devel-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAPCAL-Azure

libxml2-2-2.10.3-150500.5.14.1

libxml2-devel-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAPCAL-EC2

libxml2-2-2.10.3-150500.5.14.1

libxml2-devel-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image SLES15-SP6-SAPCAL-GCE

libxml2-2-2.10.3-150500.5.14.1

libxml2-devel-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

Image ai_15_6

libxml2-2-2.10.3-150500.5.14.1

Image tomcat_15_6

libxml2-2-2.10.3-150500.5.14.1

SUSE Linux Enterprise Micro 5.5

libxml2-2-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

python3-libxml2-2.10.3-150500.5.14.1

SUSE Linux Enterprise Module for Basesystem 15 SP5

libxml2-2-2.10.3-150500.5.14.1

libxml2-2-32bit-2.10.3-150500.5.14.1

libxml2-devel-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

python3-libxml2-2.10.3-150500.5.14.1

SUSE Linux Enterprise Module for Python 3 15 SP5

python311-libxml2-2.10.3-150500.5.14.1

openSUSE Leap 15.5

libxml2-2-2.10.3-150500.5.14.1

libxml2-2-32bit-2.10.3-150500.5.14.1

libxml2-devel-2.10.3-150500.5.14.1

libxml2-devel-32bit-2.10.3-150500.5.14.1

libxml2-doc-2.10.3-150500.5.14.1

libxml2-tools-2.10.3-150500.5.14.1

python3-libxml2-2.10.3-150500.5.14.1

python311-libxml2-2.10.3-150500.5.14.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20240555-1/
Link for SUSE-SU-2024:0555-1
https://lists.suse.com/pipermail/sle-security-updates/2024-February/017963.html
E-Mail link for SUSE-SU-2024:0555-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1219576
SUSE Bug 1219576
https://www.suse.com/security/cve/CVE-2024-25062/
SUSE CVE CVE-2024-25062 page

Описание

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Затронутые продукты

Container bci/bci-sle15-kernel-module-devel:15.5:libxml2-2-2.10.3-150500.5.14.1

Container bci/bci-sle15-kernel-module-devel:latest:libxml2-2-2.10.3-150500.5.14.1

Container bci/kiwi:latest:libxml2-2-2.10.3-150500.5.14.1

Container bci/kiwi:latest:libxml2-devel-2.10.3-150500.5.14.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-25062.html
CVE-2024-25062
https://bugzilla.suse.com/1219575
SUSE Bug 1219575