Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE 2021:171-1 Important: Libxml2 Buffer Overflow Security Advisory

suse
Calendar Grey May 21, 2021
Dist Suse Esm H88
Keep up-to-date with the SUSE Container Security Notice featuring essential enhancements for libxml2 and critical vulnerability patches.
The container suse/sles12sp3 was updated

Summary

Advisory ID: SUSE-SU-2021:1658-1 Released: Wed May 19 18:20:42 2021 Summary: Security update for libxml2 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory security issue buffer overflow important suse libxml2 container update

References

References : 1185408 1185409 1185410 1185698 CVE-2021-3516 CVE-2021-3517 CVE-2021-3518

CVE-2021-3537

1185408,1185409,1185410,1185698,CVE-2021-3516,CVE-2021-3517,CVE-2021-3518,CVE-2021-3537

This update for libxml2 fixes the following issues:

Security issues fixed:

CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel (bsc#1185698)

- CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess (bsc#1185408).

- CVE-2021-3517: Fixed a heap based buffer overflow in entities.c:xmlEncodeEntitiesInternal (bsc#1185410).

- CVE-2021-3516: Fixed a use after free in entities.c:xmlEncodeEntitiesInternal (bsc#1185409).

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2021:171-1
Container Tags : suse/sles12sp3:2.0.2 , suse/sles12sp3:24.257 , suse/sles12sp3:latest
Container Release : 24.257
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security issue buffer overflow important suse libxml2 container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here