Security update for libxslt SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:1313-1 Final 1 1 2017-05-16T13:41:07Z current 2017-05-16T13:41:07Z 2017-05-16T13:41:07Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libxslt This update for libxslt fixes the following issues: - CVE-2017-5029: The xsltAddTextString function in transform.c lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page (bsc#1035905). - CVE-2016-4738: Fix heap overread in xsltFormatNumberConversion: An empty decimal-separator could cause a heap overread. This can be exploited to leak a couple of bytes after the buffer that holds the pattern string (bsc#1005591). - CVE-2015-9019: Properly initialize random generator (bsc#934119). - CVE-2015-7995: Vulnerability in function xsltStylePreCompute' in preproc.c could cause a type confusion leading to DoS. (bsc#952474) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-SP1-2017-793,SUSE-SLE-DESKTOP-12-SP2-2017-793,SUSE-SLE-RPI-12-SP2-2017-793,SUSE-SLE-SDK-12-SP1-2017-793,SUSE-SLE-SDK-12-SP2-2017-793,SUSE-SLE-SERVER-12-SP1-2017-793,SUSE-SLE-SERVER-12-SP2-2017-793 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20171313-1/ Link for SUSE-SU-2017:1313-1 https://lists.suse.com/pipermail/sle-security-updates/2017-May/002887.html E-Mail link for SUSE-SU-2017:1313-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1005591 SUSE Bug 1005591 https://bugzilla.suse.com/1035905 SUSE Bug 1035905 https://bugzilla.suse.com/934119 SUSE Bug 934119 https://bugzilla.suse.com/952474 SUSE Bug 952474 https://www.suse.com/security/cve/CVE-2015-7995/ SUSE CVE CVE-2015-7995 page https://www.suse.com/security/cve/CVE-2015-9019/ SUSE CVE CVE-2015-9019 page https://www.suse.com/security/cve/CVE-2016-4738/ SUSE CVE CVE-2016-4738 page https://www.suse.com/security/cve/CVE-2017-5029/ SUSE CVE CVE-2017-5029 page SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 libxslt-tools-1.1.28-16.1 libxslt1-1.1.28-16.1 libxslt1-32bit-1.1.28-16.1 libxslt-devel-1.1.28-16.1 libxslt-tools-1.1.28-16.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libxslt1-1.1.28-16.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libxslt1-32bit-1.1.28-16.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libxslt-tools-1.1.28-16.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libxslt1-1.1.28-16.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libxslt1-32bit-1.1.28-16.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libxslt-tools-1.1.28-16.1 as a component of SUSE Linux Enterprise Server 12 SP1 libxslt1-1.1.28-16.1 as a component of SUSE Linux Enterprise Server 12 SP1 libxslt1-32bit-1.1.28-16.1 as a component of SUSE Linux Enterprise Server 12 SP1 libxslt-tools-1.1.28-16.1 as a component of SUSE Linux Enterprise Server 12 SP2 libxslt1-1.1.28-16.1 as a component of SUSE Linux Enterprise Server 12 SP2 libxslt1-32bit-1.1.28-16.1 as a component of SUSE Linux Enterprise Server 12 SP2 libxslt-tools-1.1.28-16.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libxslt1-1.1.28-16.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libxslt-tools-1.1.28-16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libxslt1-1.1.28-16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libxslt1-32bit-1.1.28-16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libxslt-tools-1.1.28-16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libxslt1-1.1.28-16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libxslt1-32bit-1.1.28-16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libxslt-devel-1.1.28-16.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libxslt-devel-1.1.28-16.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue. CVE-2015-7995 SUSE Linux Enterprise Desktop 12 SP1:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP1:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP1:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP2:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP2:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP2:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP1:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP1:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP1:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP2:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP2:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP2:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libxslt-devel-1.1.28-16.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libxslt-devel-1.1.28-16.1 low 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171313-1/ https://www.suse.com/security/cve/CVE-2015-7995.html CVE-2015-7995 https://bugzilla.suse.com/1123130 SUSE Bug 1123130 https://bugzilla.suse.com/952474 SUSE Bug 952474 In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs. CVE-2015-9019 SUSE Linux Enterprise Desktop 12 SP1:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP1:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP1:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP2:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP2:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP2:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP1:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP1:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP1:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP2:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP2:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP2:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libxslt-devel-1.1.28-16.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libxslt-devel-1.1.28-16.1 low 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171313-1/ https://www.suse.com/security/cve/CVE-2015-9019.html CVE-2015-9019 https://bugzilla.suse.com/1123130 SUSE Bug 1123130 https://bugzilla.suse.com/934119 SUSE Bug 934119 libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. CVE-2016-4738 SUSE Linux Enterprise Desktop 12 SP1:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP1:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP1:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP2:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP2:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP2:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP1:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP1:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP1:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP2:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP2:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP2:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libxslt-devel-1.1.28-16.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libxslt-devel-1.1.28-16.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171313-1/ https://www.suse.com/security/cve/CVE-2016-4738.html CVE-2016-4738 https://bugzilla.suse.com/1005591 SUSE Bug 1005591 https://bugzilla.suse.com/1123130 SUSE Bug 1123130 The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. CVE-2017-5029 SUSE Linux Enterprise Desktop 12 SP1:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP1:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP1:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP2:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP2:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Desktop 12 SP2:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP1:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP1:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP1:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP2:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP2:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server 12 SP2:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxslt-tools-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxslt1-1.1.28-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxslt1-32bit-1.1.28-16.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libxslt-devel-1.1.28-16.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libxslt-devel-1.1.28-16.1 low 3.3 AV:L/AC:M/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171313-1/ https://www.suse.com/security/cve/CVE-2017-5029.html CVE-2017-5029 https://bugzilla.suse.com/1028848 SUSE Bug 1028848 https://bugzilla.suse.com/1028875 SUSE Bug 1028875 https://bugzilla.suse.com/1035905 SUSE Bug 1035905 https://bugzilla.suse.com/1123130 SUSE Bug 1123130