Security update for libxslt SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:1867-1 Final 1 1 2019-07-17T11:11:12Z current 2019-07-17T11:11:12Z 2019-07-17T11:11:12Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libxslt This update for libxslt fixes the following issues: Security issues fixed: - CVE-2019-13118: Fixed a read of uninitialized stack data (bsc#1140101). - CVE-2019-13117: Fixed a uninitialized read which allowed to discern whether a byte on the stack contains certain special characters (bsc#1140095). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/nginx-ingress-controller:beta1-2019-1867,Image SLES12-SP4-Azure-BYOS-2019-1867,Image SLES12-SP4-EC2-HVM-BYOS-2019-1867,Image SLES12-SP4-GCE-BYOS-2019-1867,Image SLES12-SP4-SAP-Azure-2019-1867,Image SLES12-SP4-SAP-Azure-BYOS-2019-1867,Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2019-1867,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2019-1867,Image SLES12-SP4-SAP-EC2-HVM-2019-1867,Image SLES12-SP4-SAP-EC2-HVM-BYOS-2019-1867,Image SLES12-SP4-SAP-GCE-2019-1867,Image SLES12-SP4-SAP-GCE-BYOS-2019-1867,Image SLES12-SP4-SAP-OCI-BYOS-2019-1867,Image SLES12-SP5-Azure-BYOS-2019-1867,Image SLES12-SP5-Azure-Basic-On-Demand-2019-1867,Image SLES12-SP5-Azure-HPC-BYOS-2019-1867,Image SLES12-SP5-Azure-HPC-On-Demand-2019-1867,Image SLES12-SP5-Azure-SAP-BYOS-2019-1867,Image SLES12-SP5-Azure-SAP-On-Demand-2019-1867,Image SLES12-SP5-Azure-Standard-On-Demand-2019-1867,Image SLES12-SP5-EC2-BYOS-2019-1867,Image SLES12-SP5-EC2-ECS-On-Demand-2019-1867,Image SLES12-SP5-EC2-On-Demand-2019-1867,Image SLES12-SP5-EC2-SAP-BYOS-2019-1867,Image SLES12-SP5-EC2-SAP-On-Demand-2019-1867,Image SLES12-SP5-GCE-BYOS-2019-1867,Image SLES12-SP5-GCE-On-Demand-2019-1867,Image SLES12-SP5-GCE-SAP-BYOS-2019-1867,Image SLES12-SP5-GCE-SAP-On-Demand-2019-1867,Image SLES12-SP5-OCI-BYOS-SAP-BYOS-2019-1867,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2019-1867,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2019-1867,SUSE-2019-1867,SUSE-SLE-DESKTOP-12-SP4-2019-1867,SUSE-SLE-SDK-12-SP4-2019-1867,SUSE-SLE-SERVER-12-SP4-2019-1867 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20191867-1/ Link for SUSE-SU-2019:1867-1 https://lists.suse.com/pipermail/sle-security-updates/2019-July/005726.html E-Mail link for SUSE-SU-2019:1867-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1140095 SUSE Bug 1140095 https://bugzilla.suse.com/1140101 SUSE Bug 1140101 https://www.suse.com/security/cve/CVE-2019-13117/ SUSE CVE CVE-2019-13117 page https://www.suse.com/security/cve/CVE-2019-13118/ SUSE CVE CVE-2019-13118 page Container caasp/v4/nginx-ingress-controller:beta1 Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-GCE-BYOS Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 libxslt1-1.1.28-17.6.1 libxslt-tools-1.1.28-17.6.1 libxslt-devel-1.1.28-17.6.1 libxslt-devel-32bit-1.1.28-17.6.1 libxslt-devel-64bit-1.1.28-17.6.1 libxslt1-32bit-1.1.28-17.6.1 libxslt1-64bit-1.1.28-17.6.1 libxslt1-1.1.28-17.6.1 as a component of Container caasp/v4/nginx-ingress-controller:beta1 libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP4-Azure-BYOS libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP4-GCE-BYOS libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-Azure libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-Azure libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-EC2-HVM libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-EC2-HVM libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-GCE libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-GCE libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-Azure-BYOS libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-EC2-BYOS libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-EC2-On-Demand libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-GCE-BYOS libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-GCE-On-Demand libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libxslt-tools-1.1.28-17.6.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libxslt1-1.1.28-17.6.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libxslt-tools-1.1.28-17.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libxslt1-1.1.28-17.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libxslt1-32bit-1.1.28-17.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libxslt-tools-1.1.28-17.6.1 as a component of SUSE Linux Enterprise Server 12 SP4 libxslt1-1.1.28-17.6.1 as a component of SUSE Linux Enterprise Server 12 SP4 libxslt1-32bit-1.1.28-17.6.1 as a component of SUSE Linux Enterprise Server 12 SP4 libxslt-tools-1.1.28-17.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libxslt1-1.1.28-17.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libxslt1-32bit-1.1.28-17.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libxslt-devel-1.1.28-17.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character. CVE-2019-13117 Container caasp/v4/nginx-ingress-controller:beta1:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-Azure-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-EC2-HVM-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-GCE-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-Azure-BYOS:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-Azure-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-Azure:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-Azure:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-EC2-HVM:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-EC2-HVM:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-GCE-BYOS:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-GCE-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-GCE:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-GCE:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-OCI-BYOS:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-OCI-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-Azure-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-Azure-Basic-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-Azure-HPC-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-Azure-HPC-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-Azure-SAP-BYOS:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-Azure-SAP-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-Azure-SAP-On-Demand:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-Azure-SAP-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-Azure-Standard-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-EC2-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-EC2-ECS-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-EC2-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-EC2-SAP-BYOS:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-EC2-SAP-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-EC2-SAP-On-Demand:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-EC2-SAP-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-GCE-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-GCE-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-GCE-SAP-BYOS:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-GCE-SAP-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-GCE-SAP-On-Demand:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-GCE-SAP-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libxslt1-1.1.28-17.6.1 SUSE Linux Enterprise Desktop 12 SP4:libxslt-tools-1.1.28-17.6.1 SUSE Linux Enterprise Desktop 12 SP4:libxslt1-1.1.28-17.6.1 SUSE Linux Enterprise Desktop 12 SP4:libxslt1-32bit-1.1.28-17.6.1 SUSE Linux Enterprise Server 12 SP4:libxslt-tools-1.1.28-17.6.1 SUSE Linux Enterprise Server 12 SP4:libxslt1-1.1.28-17.6.1 SUSE Linux Enterprise Server 12 SP4:libxslt1-32bit-1.1.28-17.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libxslt-tools-1.1.28-17.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libxslt1-1.1.28-17.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libxslt1-32bit-1.1.28-17.6.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libxslt-devel-1.1.28-17.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191867-1/ https://www.suse.com/security/cve/CVE-2019-13117.html CVE-2019-13117 https://bugzilla.suse.com/1140095 SUSE Bug 1140095 https://bugzilla.suse.com/1157028 SUSE Bug 1157028 https://bugzilla.suse.com/1160968 SUSE Bug 1160968 In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data. CVE-2019-13118 Container caasp/v4/nginx-ingress-controller:beta1:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-Azure-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-EC2-HVM-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-GCE-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-Azure-BYOS:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-Azure-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-Azure:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-Azure:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-EC2-HVM:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-EC2-HVM:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-GCE-BYOS:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-GCE-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-GCE:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-GCE:libxslt1-1.1.28-17.6.1 Image SLES12-SP4-SAP-OCI-BYOS:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP4-SAP-OCI-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-Azure-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-Azure-Basic-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-Azure-HPC-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-Azure-HPC-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-Azure-SAP-BYOS:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-Azure-SAP-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-Azure-SAP-On-Demand:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-Azure-SAP-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-Azure-Standard-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-EC2-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-EC2-ECS-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-EC2-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-EC2-SAP-BYOS:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-EC2-SAP-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-EC2-SAP-On-Demand:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-EC2-SAP-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-GCE-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-GCE-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-GCE-SAP-BYOS:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-GCE-SAP-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-GCE-SAP-On-Demand:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-GCE-SAP-On-Demand:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libxslt1-1.1.28-17.6.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libxslt-tools-1.1.28-17.6.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libxslt1-1.1.28-17.6.1 SUSE Linux Enterprise Desktop 12 SP4:libxslt-tools-1.1.28-17.6.1 SUSE Linux Enterprise Desktop 12 SP4:libxslt1-1.1.28-17.6.1 SUSE Linux Enterprise Desktop 12 SP4:libxslt1-32bit-1.1.28-17.6.1 SUSE Linux Enterprise Server 12 SP4:libxslt-tools-1.1.28-17.6.1 SUSE Linux Enterprise Server 12 SP4:libxslt1-1.1.28-17.6.1 SUSE Linux Enterprise Server 12 SP4:libxslt1-32bit-1.1.28-17.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libxslt-tools-1.1.28-17.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libxslt1-1.1.28-17.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libxslt1-32bit-1.1.28-17.6.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libxslt-devel-1.1.28-17.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191867-1/ https://www.suse.com/security/cve/CVE-2019-13118.html CVE-2019-13118 https://bugzilla.suse.com/1140101 SUSE Bug 1140101 https://bugzilla.suse.com/1157028 SUSE Bug 1157028 https://bugzilla.suse.com/1160968 SUSE Bug 1160968