Security update for libxml2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:0401-1 Final 1 1 2018-02-08T16:48:15Z current 2018-02-08T16:48:15Z 2018-02-08T16:48:15Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libxml2 This update for libxml2 fixes one issue. This security issue was fixed: - CVE-2017-15412: Prevent use after free when calling XPath extension functions that allowed remote attackers to cause DoS or potentially RCE (bsc#1077993) - CVE-2016-5131: Use-after-free vulnerability in libxml2 allowed remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function. (bsc#1078813) - CVE-2017-5130: Fixed a potential remote buffer overflow in function xmlMemoryStrdup() (bsc#1078806) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-CAASP-ALL-2018-276,SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2018-276,SUSE-SLE-DESKTOP-12-SP2-2018-276,SUSE-SLE-DESKTOP-12-SP3-2018-276,SUSE-SLE-RPI-12-SP2-2018-276,SUSE-SLE-SDK-12-SP2-2018-276,SUSE-SLE-SDK-12-SP3-2018-276,SUSE-SLE-SERVER-12-SP2-2018-276,SUSE-SLE-SERVER-12-SP3-2018-276 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20180401-1/ Link for SUSE-SU-2018:0401-1 https://lists.suse.com/pipermail/sle-security-updates/2018-February/003716.html E-Mail link for SUSE-SU-2018:0401-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1077993 SUSE Bug 1077993 https://bugzilla.suse.com/1078806 SUSE Bug 1078806 https://bugzilla.suse.com/1078813 SUSE Bug 1078813 https://www.suse.com/security/cve/CVE-2016-5131/ SUSE CVE CVE-2016-5131 page https://www.suse.com/security/cve/CVE-2017-15412/ SUSE CVE CVE-2017-15412 page https://www.suse.com/security/cve/CVE-2017-5130/ SUSE CVE CVE-2017-5130 page SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 libxml2-2-2.9.4-46.12.1 libxml2-2-32bit-2.9.4-46.12.1 libxml2-tools-2.9.4-46.12.1 python-libxml2-2.9.4-46.12.1 libxml2-doc-2.9.4-46.12.1 libxml2-devel-2.9.4-46.12.1 libxml2-2-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libxml2-2-32bit-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libxml2-tools-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 python-libxml2-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libxml2-2-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libxml2-2-32bit-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libxml2-tools-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 python-libxml2-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libxml2-2-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server 12 SP2 libxml2-2-32bit-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server 12 SP2 libxml2-doc-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server 12 SP2 libxml2-tools-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server 12 SP2 python-libxml2-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server 12 SP2 libxml2-2-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server 12 SP3 libxml2-2-32bit-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server 12 SP3 libxml2-doc-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server 12 SP3 libxml2-tools-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server 12 SP3 python-libxml2-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server 12 SP3 libxml2-2-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libxml2-doc-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libxml2-tools-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 python-libxml2-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libxml2-2-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libxml2-2-32bit-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libxml2-doc-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libxml2-tools-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 python-libxml2-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libxml2-2-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libxml2-2-32bit-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libxml2-doc-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libxml2-tools-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 python-libxml2-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libxml2-devel-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libxml2-devel-2.9.4-46.12.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function. CVE-2016-5131 SUSE Linux Enterprise Desktop 12 SP2:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP2:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP2:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP2:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP3:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP3:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP3:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP3:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP2:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP2:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP2:libxml2-doc-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP2:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP2:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP3:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP3:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP3:libxml2-doc-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP3:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP3:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxml2-doc-2.9.4-46.12.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxml2-doc-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libxml2-doc-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libxml2-devel-2.9.4-46.12.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libxml2-devel-2.9.4-46.12.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180401-1/ https://www.suse.com/security/cve/CVE-2016-5131.html CVE-2016-5131 https://bugzilla.suse.com/1014873 SUSE Bug 1014873 https://bugzilla.suse.com/1069433 SUSE Bug 1069433 https://bugzilla.suse.com/1078813 SUSE Bug 1078813 https://bugzilla.suse.com/1123919 SUSE Bug 1123919 https://bugzilla.suse.com/989901 SUSE Bug 989901 Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2017-15412 SUSE Linux Enterprise Desktop 12 SP2:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP2:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP2:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP2:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP3:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP3:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP3:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP3:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP2:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP2:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP2:libxml2-doc-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP2:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP2:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP3:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP3:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP3:libxml2-doc-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP3:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP3:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxml2-doc-2.9.4-46.12.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxml2-doc-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libxml2-doc-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libxml2-devel-2.9.4-46.12.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libxml2-devel-2.9.4-46.12.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180401-1/ https://www.suse.com/security/cve/CVE-2017-15412.html CVE-2017-15412 https://bugzilla.suse.com/1071691 SUSE Bug 1071691 https://bugzilla.suse.com/1077993 SUSE Bug 1077993 https://bugzilla.suse.com/1123129 SUSE Bug 1123129 https://bugzilla.suse.com/1123919 SUSE Bug 1123919 An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file. CVE-2017-5130 SUSE Linux Enterprise Desktop 12 SP2:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP2:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP2:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP2:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP3:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP3:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP3:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Desktop 12 SP3:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP2:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP2:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP2:libxml2-doc-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP2:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP2:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP3:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP3:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP3:libxml2-doc-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP3:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Server 12 SP3:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxml2-doc-2.9.4-46.12.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxml2-doc-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libxml2-2-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libxml2-2-32bit-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libxml2-doc-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libxml2-tools-2.9.4-46.12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:python-libxml2-2.9.4-46.12.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libxml2-devel-2.9.4-46.12.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libxml2-devel-2.9.4-46.12.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180401-1/ https://www.suse.com/security/cve/CVE-2017-5130.html CVE-2017-5130 https://bugzilla.suse.com/1064066 SUSE Bug 1064066 https://bugzilla.suse.com/1064089 SUSE Bug 1064089 https://bugzilla.suse.com/1078806 SUSE Bug 1078806 https://bugzilla.suse.com/1123129 SUSE Bug 1123129 https://bugzilla.suse.com/1123919 SUSE Bug 1123919