SUSE-SU-2026:1153-1

Опубликовано: 31 мар. 2026

Источник: suse-cvrf

Описание

Security update for perl-XML-Parser

This update for perl-XML-Parser fixes the following issues:

CVE-2006-10002: heap buffer overflow in parse_stream when processing UTF-8 input streams (bsc#1259901).
CVE-2006-10003: off-by-one heap buffer overflow in st_serial_stack (bsc#1259902).

Список пакетов

Container suse/kiosk/xorg:latest

perl-XML-Parser-2.44-150000.3.3.1

Container suse/manager/5.0/x86_64/server:latest

perl-XML-Parser-2.44-150000.3.3.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-BYOS

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-BYOS-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-BYOS-EC2

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-BYOS-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-EC2

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-Hardened

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-Hardened-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-Hardened-BYOS

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-Hardened-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAPCAL

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAPCAL-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAPCAL-EC2

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAPCAL-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP5-SAP-Azure-3P

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP5-SAP-BYOS-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP5-SAP-BYOS-EC2

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP5-SAP-BYOS-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP5-SAP-Hardened-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP5-SAP-Hardened-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP5-SAPCAL-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP5-SAPCAL-EC2

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP5-SAPCAL-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-Azure-3P

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-BYOS

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-BYOS-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-BYOS-EC2

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-BYOS-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-EC2

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-Hardened

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-Hardened-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-Hardened-BYOS

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-Hardened-EC2

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAP-Hardened-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAPCAL

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAPCAL-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAPCAL-EC2

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP6-SAPCAL-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP7-SAP-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP7-SAP-Azure-3P

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP7-SAP-BYOS-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP7-SAP-BYOS-EC2

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP7-SAP-BYOS-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP7-SAP-EC2

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP7-SAP-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP7-SAP-GCE-3P

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP7-SAP-Hardened-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP7-SAP-Hardened-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP7-SAPCAL-Azure

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP7-SAPCAL-EC2

perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP7-SAPCAL-GCE

perl-XML-Parser-2.44-150000.3.3.1

Image server-image

perl-XML-Parser-2.44-150000.3.3.1

Image server-image-sles15sp7

perl-XML-Parser-2.44-150000.3.3.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

perl-XML-Parser-2.44-150000.3.3.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

perl-XML-Parser-2.44-150000.3.3.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

perl-XML-Parser-2.44-150000.3.3.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

perl-XML-Parser-2.44-150000.3.3.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

perl-XML-Parser-2.44-150000.3.3.1

SUSE Linux Enterprise Server 15 SP4-LTSS

perl-XML-Parser-2.44-150000.3.3.1

SUSE Linux Enterprise Server 15 SP5-LTSS

perl-XML-Parser-2.44-150000.3.3.1

SUSE Linux Enterprise Server 15 SP6-LTSS

perl-XML-Parser-2.44-150000.3.3.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

perl-XML-Parser-2.44-150000.3.3.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

perl-XML-Parser-2.44-150000.3.3.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

perl-XML-Parser-2.44-150000.3.3.1

openSUSE Leap 15.6

perl-XML-Parser-2.44-150000.3.3.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20261153-1/
Link for SUSE-SU-2026:1153-1
https://lists.suse.com/pipermail/sle-updates/2026-March/045200.html
E-Mail link for SUSE-SU-2026:1153-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1259901
SUSE Bug 1259901
https://bugzilla.suse.com/1259902
SUSE Bug 1259902
https://www.suse.com/security/cve/CVE-2006-10002/
SUSE CVE CVE-2006-10002 page
https://www.suse.com/security/cve/CVE-2006-10003/
SUSE CVE CVE-2006-10003 page

Описание

XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes. A :utf8 PerlIO layer, parse_stream() in Expat.xs could overflow the XML input buffer because Perl's read() returns decoded characters while SvPV() gives back multi-byte UTF-8 bytes that can exceed the pre-allocated buffer size. This can cause heap corruption (double free or corruption) and crashes.

Затронутые продукты

Container suse/kiosk/xorg:latest:perl-XML-Parser-2.44-150000.3.3.1

Container suse/manager/5.0/x86_64/server:latest:perl-XML-Parser-2.44-150000.3.3.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest:perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:perl-XML-Parser-2.44-150000.3.3.1

Ссылки

https://www.suse.com/security/cve/CVE-2006-10002.html
CVE-2006-10002
https://bugzilla.suse.com/1259901
SUSE Bug 1259901
https://bugzilla.suse.com/1262588
SUSE Bug 1262588

Описание

XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack. In the case (stackptr == stacksize - 1), the stack will NOT be expanded. Then the new value will be written at location (++stackptr), which equals stacksize and therefore falls just outside the allocated buffer. The bug can be observed when parsing an XML file with very deep element nesting

Затронутые продукты

Container suse/kiosk/xorg:latest:perl-XML-Parser-2.44-150000.3.3.1

Container suse/manager/5.0/x86_64/server:latest:perl-XML-Parser-2.44-150000.3.3.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest:perl-XML-Parser-2.44-150000.3.3.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:perl-XML-Parser-2.44-150000.3.3.1

Ссылки

https://www.suse.com/security/cve/CVE-2006-10003.html
CVE-2006-10003
https://bugzilla.suse.com/1259902
SUSE Bug 1259902
https://bugzilla.suse.com/1262588
SUSE Bug 1262588