SUSE: 2021:172-1 suse/sles12sp4 Security Update
Summary
Advisory ID: SUSE-SU-2021:1658-1 Released: Wed May 19 18:20:42 2021 Summary: Security update for libxml2 Type: security Severity: important Advisory ID: SUSE-RU-2021:1667-1 Released: Thu May 20 09:34:34 2021 Summary: Recommended update for audit Type: recommended Severity: moderate
References
References : 1179515 1184362 1185408 1185409 1185410 1185698 CVE-2021-3516
CVE-2021-3517 CVE-2021-3518 CVE-2021-3537
1185408,1185409,1185410,1185698,CVE-2021-3516,CVE-2021-3517,CVE-2021-3518,CVE-2021-3537
This update for libxml2 fixes the following issues:
Security issues fixed:
CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel (bsc#1185698)
- CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess (bsc#1185408).
- CVE-2021-3517: Fixed a heap based buffer overflow in entities.c:xmlEncodeEntitiesInternal (bsc#1185410).
- CVE-2021-3516: Fixed a use after free in entities.c:xmlEncodeEntitiesInternal (bsc#1185409).
1179515,1184362
This update for audit fixes the following issues:
- Enable Aarch64 processor support. (bsc#1179515, bsc#1184362)