Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

openSUSE 13.2: 2021:5678-1 Critical: Expat Memory Overflow Patch

opensuse
Calendar Grey May 30, 2016
Scroller Opensuse
Critical patch released for libjpeg-turbo in Fedora addresses memory corruption and image rendering vulnerabilities. Ensure protection by applying the newest updates.
An update that fixes two vulnerabilities is now available

Description

This update for expat fixes the following security issues:

- CVE-2015-1283: Fixed multiple integer overflows that could lead to

buffer overflows [boo#980391]

- CVE-2016-0718: Fixed Expat XML parser that mishandles certain kinds of

malformed input documents [boo#979441].

Topics%20covered

Topics Covered

security advisory buffer overflow important patch update XML parser openSUSE expat

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 13.2:

zypper in -t patch openSUSE-2016-660=1

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 13.2 (i586 x86_64):

expat-2.1.0-14.3.1

expat-debuginfo-2.1.0-14.3.1

expat-debugsource-2.1.0-14.3.1

libexpat-devel-2.1.0-14.3.1

libexpat1-2.1.0-14.3.1

libexpat1-debuginfo-2.1.0-14.3.1

- openSUSE 13.2 (x86_64):

expat-debuginfo-32bit-2.1.0-14.3.1

libexpat-devel-32bit-2.1.0-14.3.1

libexpat1-32bit-2.1.0-14.3.1

libexpat1-debuginfo-32bit-2.1.0-14.3.1

References

https://www.suse.com/security/cve/CVE-2015-1283.html

https://www.suse.com/security/cve/CVE-2016-0718.html

https://bugzilla.suse.com/show_bug.cgi?id=979441

https://bugzilla.suse.com/show_bug.cgi?id=980391

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2016:1441-1
Rating: important
Affected Products: openSUSE 13.2 .

Topics%20covered

Topics Covered

security advisory buffer overflow important patch update XML parser openSUSE expat

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.