Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
100
security advisorymoderateupdateSUSE: 2021:2016-1 Moderate Vulnerability in libxml2 Exponential Attack
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:2016-1 Rating: moderate References: #1186015 Cross-References: CVE-2021-3541 CVSS scores: CVE-2021-3541 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP5 SUSE Linux Enterprise Server 12-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libxml2 fixes the following issues: - CVE-2021-3541: Fixed exponential entity expansion attack that could bypass all existing protection mechanisms (bsc#1186015). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2021-2016=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-2016=1 Package List: - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64): libxml2-debugsource-2.9.4-46.46.1 libxml2-devel-2.9.4-46.46.1 - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): libxml2-2-2.9.4-46.46.1 libxml2-2-debuginfo-2.9.4-46.46.1 libxml2-debugsource-2.9.4-46.46.1 libxml2-tools-2.9.4-46.46.1 libxml2-tools-debuginfo-2.9.4-46.46.1 python-libxml2-2.9.4-46.46.1 python-libxml2-debuginfo-2.9.4-46.46.1 python-libxml2-debugsource-2.9.4-46.46.1 - SUSE Linux Enterprise Server 12-SP5 (s390x x86_64): libxml2-2-32bit-2.9.4-46.46.1 libxml2-2-debuginfo-32bit-2.9.4-46.46.1 - SUSE Linux Enterprise Server 12-SP5 (noarch): libxml2-doc-2.9.4-46.46.1 References: https://www.suse.com/security/cve/CVE-2021-3541.html https://bugzilla.suse.com/1186015 . SUSE releases an update for libxml2 addressing a vulnerability classified as moderate severity. Instructions for installation and the specific issues resolved are outlined.. libxml2 Security Update,SUSE Software Patch,Moderate Severity Update. . LinuxSecurity.com Team
Jun 18, 2021
SuSE
202
security advisorymoderate severitypatchopenSUSE: 2021:0886-1 Moderate: Libxml2 Exponential Attack Fix
An update that fixes one vulnerability is now available. . openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0886-1 Rating: moderate References: #1186015 Cross-References: CVE-2021-3541 CVSS scores: CVE-2021-3541 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libxml2 fixes the following issues: - CVE-2021-3541: Fixed exponential entity expansion attack bypasses all existing protection mechanisms. (bsc#1186015) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-886=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libxml2-2-2.9.7-lp152.10.15.1 libxml2-2-debuginfo-2.9.7-lp152.10.15.1 libxml2-debugsource-2.9.7-lp152.10.15.1 libxml2-devel-2.9.7-lp152.10.15.1 libxml2-tools-2.9.7-lp152.10.15.1 libxml2-tools-debuginfo-2.9.7-lp152.10.15.1 python-libxml2-python-debugsource-2.9.7-lp152.10.15.1 python2-libxml2-python-2.9.7-lp152.10.15.1 python2-libxml2-python-debuginfo-2.9.7-lp152.10.15.1 python3-libxml2-python-2.9.7-lp152.10.15.1 python3-libxml2-python-debuginfo-2.9.7-lp152.10.15.1 - openSUSE Leap 15.2 (x86_64): libxml2-2-32bit-2.9.7-lp152.10.15.1 libxml2-2-32bit-debuginfo-2.9.7-lp152.10.15.1 libxml2-devel-32bit-2.9.7-lp152.10.15.1 - openSUSE Leap 15.2 (noarch): libxml2-doc-2.9.7-lp152.10.15.1 References: https://www.suse.com/security/cve/CVE-2021-3541.html https://bugzilla.suse.com/1186015 . This patch resolves the substantial vulnerability in libxml2 found in openSUSE, targeting the problem of rapid entity growth.. openSUSE Security, libxml2 Fix, Patch Instructions, Exponential Attack. . LinuxSecurity.com Team
Jun 16, 2021
OpenSUSE
100
security advisorymoderatesoftware updateSUSE: 2021:1917-1 Moderate: libxml2 Exponential Attack Fix
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:1917-1 Rating: moderate References: #1186015 Cross-References: CVE-2021-3541 CVSS scores: CVE-2021-3541 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE MicroOS 5.0 SUSE Linux Enterprise Module for Python2 15-SP3 SUSE Linux Enterprise Module for Python2 15-SP2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libxml2 fixes the following issues: - CVE-2021-3541: Fixed exponential entity expansion attack bypasses all existing protection mechanisms. (bsc#1186015) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE MicroOS 5.0: zypper in -t patch SUSE-SUSE-MicroOS-5.0-2021-1917=1 - SUSE Linux Enterprise Module for Python2 15-SP3: zypper in -t patch SUSE-SLE-Module-Python2-15-SP3-2021-1917=1 - SUSE Linux Enterprise Module for Python2 15-SP2: zypper in -t patch SUSE-SLE-Module-Python2-15-SP2-2021-1917=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2021-1917=1 - SUSE Linux Enterprise Module for Basesystem 15-SP2: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP2-2021-1917=1 Package List: - SUSE MicroOS 5.0 (aarch64 x86_64): libxml2-2-2.9.7-3.37.1 libxml2-2-debuginfo-2.9.7-3.37.1 libxml2-debugsource-2.9.7-3.37.1 libxml2-tools-2.9.7-3.37.1 libxml2-tools-debuginfo-2.9.7-3.37.1 - SUSE Linux Enterprise Module for Python2 15-SP3 (aarch64 ppc64le s390x x86_64): python-libxml2-python-debugsource-2.9.7-3.37.1 python2-libxml2-python-2.9.7-3.37.1 python2-libxml2-python-debuginfo-2.9.7-3.37.1 - SUSE Linux Enterprise Module for Python2 15-SP2 (aarch64 ppc64le s390x x86_64): python-libxml2-python-debugsource-2.9.7-3.37.1 python2-libxml2-python-2.9.7-3.37.1 python2-libxml2-python-debuginfo-2.9.7-3.37.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libxml2-2-2.9.7-3.37.1 libxml2-2-debuginfo-2.9.7-3.37.1 libxml2-debugsource-2.9.7-3.37.1 libxml2-devel-2.9.7-3.37.1 libxml2-tools-2.9.7-3.37.1 libxml2-tools-debuginfo-2.9.7-3.37.1 python-libxml2-python-debugsource-2.9.7-3.37.1 python3-libxml2-python-2.9.7-3.37.1 python3-libxml2-python-debuginfo-2.9.7-3.37.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): libxml2-2-32bit-2.9.7-3.37.1 libxml2-2-32bit-debuginfo-2.9.7-3.37.1 - SUSE Linux Enterprise Module for Basesystem 15-SP2 (aarch64 ppc64le s390x x86_64): libxml2-2-2.9.7-3.37.1 libxml2-2-debuginfo-2.9.7-3.37.1 libxml2-debugsource-2.9.7-3.37.1 libxml2-devel-2.9.7-3.37.1 libxml2-tools-2.9.7-3.37.1 libxml2-tools-debuginfo-2.9.7-3.37.1 python-libxml2-python-debugsource-2.9.7-3.37.1 python3-libxml2-python-2.9.7-3.37.1 python3-libxml2-python-debuginfo-2.9.7-3.37.1 - SUSE Linux Enterprise Module for Basesystem 15-SP2 (x86_64): libxml2-2-32bit-2.9.7-3.37.1 libxml2-2-32bit-debuginfo-2.9.7-3.37.1 References: https://www.suse.com/security/cve/CVE-2021-3541.html https://bugzilla.suse.com/1186015 . A recent update for libxml2 has been released to remediate the CVE-2021-3541 vulnerability, classified with a moderate severity level, across multipleSUSE distributions.. SUSE, libxml2, Python, MicroOS, security update. . LinuxSecurity.com Team
Jun 09, 2021
SuSE
89
security advisorymoderateFedoraFedora 34: FEDORA-2021-e8b7e177a4 moderate: libxml2 attack fix
Update to 2.9.12 * Fix CVE-2021-3541 * Verify sources with GPG signature. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-e8b7e177a4 2021-05-24 01:00:24.873751 --------------------------------------------------------------------------------Name : libxml2 Product : Fedora 34 Version : 2.9.12 Release : 2.fc34 URL : Summary : Library providing XML and HTML support Description : This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library. --------------------------------------------------------------------------------Update Information: Update to 2.9.12 * Fix CVE-2021-3541 * Verify sources with GPG signature --------------------------------------------------------------------------------ChangeLog: * Wed May 19 2021 David King - 2.9.12-2 - Fix python-lxml regression with 2.9.12 * Thu May 13 2021 David King - 2.9.12-1 - Update to 2.9.12 (#1960153) --------------------------------------------------------------------------------References: [ 1 ] Bug #1960153 - CVE-2021-3541 libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1960153 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-e8b7e177a4' at the command line. For more information, refer to thednf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
May 23, 2021
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!