Oval Definition:oval:org.opensuse.security:def:78952
Revision Date:2017-05-30Version:1
Title:Security update for libxml2 (Moderate)
Description:



This update for libxml2 fixes the following issues:

- CVE-2017-9047, CVE-2017-9048: The function xmlSnprintfElementContent in valid.c was vulnerable to a stack buffer overflow (bsc#1039063, bsc#1039064) - CVE-2017-9049: The function xmlDictComputeFastKey in dict.c was vulnerable to a heap-based buffer over-read. (bsc#1039066) - CVE-2017-9050: The function xmlDictAddString was vulnerable to a heap-based buffer over-read (bsc#1039661) - CVE-2016-1839: heap-based buffer overflow (xmlDictAddString func) (bnc#1039069)

Family:unixClass:patch
Status:Reference(s):1039063
1039064
1039066
1039069
1039661
981114
CVE-2016-1839
CVE-2017-9047
CVE-2017-9048
CVE-2017-9049
CVE-2017-9050
SUSE-SU-2017:1454-1
Platform(s):SUSE Linux Enterprise Desktop 12 SP2
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • libxml2-2-2.9.4-36.1 is installed
  • OR libxml2-2-32bit-2.9.4-36.1 is installed
  • OR libxml2-tools-2.9.4-36.1 is installed
  • OR python-libxml2-2.9.4-36.1 is installed
  • BACK