Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

openSUSE Leap 15.3 Security Advisory: 2021:2958-1 Important Xerces-C Fix

opensuse
Calendar Grey September 6, 2021
Dist Opensuse Esm H88
Crucial safety patch for openSUSE addressing a use-after-free vulnerability in xerces-c. Update immediately to maintain system security.
An update that fixes one vulnerability is now available

Description

This update for xerces-c fixes the following issues:

- CVE-2018-1311: Fixed use-after-free inside XML parser during the

scanning of external DTDs (bsc#1159552).

Topics%20covered

Topics Covered

security advisory important patch xerces-c openSUSE use-after-free

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.3:

zypper in -t patch openSUSE-SLE-15.3-2021-2958=1

Package List

- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):

libxerces-c-3_1-3.1.4-10.3.1

libxerces-c-3_1-debuginfo-3.1.4-10.3.1

- openSUSE Leap 15.3 (x86_64):

libxerces-c-3_1-32bit-3.1.4-10.3.1

libxerces-c-3_1-32bit-debuginfo-3.1.4-10.3.1

References

https://www.suse.com/security/cve/CVE-2018-1311.html

https://bugzilla.suse.com/1159552

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2021:2958-1
Rating: important
Affected Products: openSUSE Leap 15.3 .

Topics%20covered

Topics Covered

security advisory important patch xerces-c openSUSE use-after-free

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here