Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2023:1309-1 Important: Libxml2 Security Fix for Container

suse
Calendar Grey April 28, 2023
Dist Suse Esm H88
SUSE issued a security patch for the suse/sle15 container, resolving significant vulnerabilities in libxml2 and improving overall security measures.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-SU-2023:2048-1 Released: Wed Apr 26 21:05:45 2023 Summary: Security update for libxml2 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory suse important update libxml2 container security

References

References : 1065270 1199132 1204585 1210411 1210412 CVE-2021-3541 CVE-2022-29824

CVE-2023-28484 CVE-2023-29469

1065270,1199132,1204585,1210411,1210412,CVE-2021-3541,CVE-2022-29824,CVE-2023-28484,CVE-2023-29469

This update for libxml2 fixes the following issues:

- CVE-2023-29469: Fixed inconsistent result when hashing empty strings (bsc#1210412).

- CVE-2023-28484: Fixed NULL pointer dereference in xmlSchemaFixupComplexType (bsc#1210411).

- CVE-2022-29824: Fixed integer overflow leading to out-of-bounds write in buf.c (bsc#1199132).

The following non-security bugs were fixed:

- Added W3C conformance tests to the testsuite (bsc#1204585).

- Fixed NULL pointer dereference when parsing invalid data (glgo#libxml2!15) (bsc#1065270) .

The following package changes have been done:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:1309-1
Container Tags : bci/bci-base:15.3 , bci/bci-base:15.3.17.20.128 , suse/sle15:15.3 , suse/sle15:15.3.17.20.128
Container Release : 17.20.128
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory suse important update libxml2 container security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here