Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2023:1308-1 Critical Update: libxml2 Security Vulnerability Fix

suse
Calendar Grey April 28, 2023
Dist Suse Esm H88
SUSE Container Security Notification for suse/sle15 provides information on security updates regarding libxml2 and its associated modules.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-SU-2023:2048-1 Released: Wed Apr 26 21:05:45 2023 Summary: Security update for libxml2 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory important security patch SUSE libxml2 container update suse/sle15

References

References : 1065270 1199132 1204585 1210411 1210412 CVE-2021-3541 CVE-2022-29824

CVE-2023-28484 CVE-2023-29469

1065270,1199132,1204585,1210411,1210412,CVE-2021-3541,CVE-2022-29824,CVE-2023-28484,CVE-2023-29469

This update for libxml2 fixes the following issues:

- CVE-2023-29469: Fixed inconsistent result when hashing empty strings (bsc#1210412).

- CVE-2023-28484: Fixed NULL pointer dereference in xmlSchemaFixupComplexType (bsc#1210411).

- CVE-2022-29824: Fixed integer overflow leading to out-of-bounds write in buf.c (bsc#1199132).

The following non-security bugs were fixed:

- Added W3C conformance tests to the testsuite (bsc#1204585).

- Fixed NULL pointer dereference when parsing invalid data (glgo#libxml2!15) (bsc#1065270) .

The following package changes have been done:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:1308-1
Container Tags : suse/sle15:15.2 , suse/sle15:15.2.9.5.288
Container Release : 9.5.288
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory important security patch SUSE libxml2 container update suse/sle15

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here