Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

SUSE: 2022:2711-1 Important: Libxml2 Security Update For Container

suse
Calendar Grey October 26, 2022
Dist Suse Esm H88
SUSE Container Maintenance Bulletin: suse/sles12sp4 includes significant security updates and resolutions.
The container suse/sles12sp4 was updated

Summary

Advisory ID: SUSE-SU-2022:3717-1 Released: Tue Oct 25 10:17:36 2022 Summary: Security update for libxml2 Type: security Severity: important

References

References : 1201978 1204366 1204367 CVE-2016-3709 CVE-2022-40303 CVE-2022-40304

1201978,1204366,1204367,CVE-2016-3709,CVE-2022-40303,CVE-2022-40304

This update for libxml2 fixes the following issues:

- CVE-2016-3709: Fixed possible XSS vulnerability (bsc#1201978).

- CVE-2022-40303: Fixed integer overflows with XML_PARSE_HUGE (bsc#1204366).

- CVE-2022-40304: Fixed dict corruption caused by entity reference cycles (bsc#1204367).

The following package changes have been done:

- base-container-licenses-3.0-1.320 updated

- container-suseconnect-2.0.0-1.206 updated

- libxml2-2-2.9.4-46.59.2 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2711-1
Container Tags : suse/sles12sp4:26.518 , suse/sles12sp4:latest
Container Release : 26.518
Severity : important
Type : security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here