shield Security update for libxml2

SUSE-SLE-DESKTOP-12-SP2-2017-891

This update for libxml2 fixes the following issues: - CVE-2017-9047, CVE-2017-9048: The function xmlSnprintfElementContent in valid.c was vulnerable to a stack buffer overflow (bsc#1039063, bsc#1039064) - CVE-2017-9049: The function xmlDictComputeFastKey in dict.c was vulnerable to a heap-based buffer over-read. (bsc#1039066) - CVE-2017-9050: The function xmlDictAddString was vulnerable to a heap-based buffer over-read (bsc#1039661) - CVE-2016-1839: heap-based buffer overflow (xmlDictAddString func) (bnc#1039069)

• Release Date
  May 30 2017
• References
  Bugzilla: 1039069, 1039064, 1039066, 1039661, 1039063, 981114
  CVEs: CVE-2017-9047, CVE-2017-9048, CVE-2017-9049, CVE-2017-9050, CVE-2016-1839
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Desktop 12.2 x86_64

• Packages
  libxml2
  A Library to Manipulate XML Files

  2.9.4-36.1

  lock src

  libxml2-2
  A Library to Manipulate XML Files

  2.9.4-36.1

  lock rpm

  libxml2-2-32bit
  A Library to Manipulate XML Files

  2.9.4-36.1

  lock rpm

  libxml2-tools
  Tools using libxml

  2.9.4-36.1

  lock rpm

  python-libxml2
  Python Bindings for libxml2

  2.9.4-36.1

  lock rpm

  lock src