Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

SUSE: 2023:1339-1 Important Update for Toolbox Security Issues

suse
Calendar Grey April 28, 2023
Dist Suse Esm H88
SUSE Container Security Update: suse/sle-micro/5.1/toolbox revision addressing critical vulnerabilities and necessary patches.
The container suse/sle-micro/5.1/toolbox was updated

Summary

Advisory ID: SUSE-SU-2023:2048-1 Released: Wed Apr 26 21:05:45 2023 Summary: Security update for libxml2 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory security update important suse libxml2 toolbox container

References

References : 1065270 1199132 1204585 1210411 1210412 CVE-2021-3541 CVE-2022-29824

CVE-2023-28484 CVE-2023-29469

1065270,1199132,1204585,1210411,1210412,CVE-2021-3541,CVE-2022-29824,CVE-2023-28484,CVE-2023-29469

This update for libxml2 fixes the following issues:

- CVE-2023-29469: Fixed inconsistent result when hashing empty strings (bsc#1210412).

- CVE-2023-28484: Fixed NULL pointer dereference in xmlSchemaFixupComplexType (bsc#1210411).

- CVE-2022-29824: Fixed integer overflow leading to out-of-bounds write in buf.c (bsc#1199132).

The following non-security bugs were fixed:

- Added W3C conformance tests to the testsuite (bsc#1204585).

- Fixed NULL pointer dereference when parsing invalid data (glgo#libxml2!15) (bsc#1065270) .

The following package changes have been done:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:1339-1
Container Tags : suse/sle-micro/5.1/toolbox:12.1 , suse/sle-micro/5.1/toolbox:12.1-2.2.380 , suse/sle-micro/5.1/toolbox:latest
Container Release : 2.2.380
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security update important suse libxml2 toolbox container

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here