shield Security update for libxml2

SUSE-SLE-DESKTOP-12-SP2-2018-276

This update for libxml2 fixes one issue. This security issue was fixed: - CVE-2017-15412: Prevent use after free when calling XPath extension functions that allowed remote attackers to cause DoS or potentially RCE (bsc#1077993) - CVE-2016-5131: Use-after-free vulnerability in libxml2 allowed remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function. (bsc#1078813) - CVE-2017-5130: Fixed a potential remote buffer overflow in function xmlMemoryStrdup() (bsc#1078806)

• Release Date
  Feb 8 2018
• References
  Bugzilla: 1077993, 1078813, 1078806
  CVEs: CVE-2016-5131, CVE-2017-5130, CVE-2017-15412
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Desktop 12.2 x86_64

• Packages
  libxml2
  A Library to Manipulate XML Files

  2.9.4-46.12.1

  lock src

  libxml2-2
  A Library to Manipulate XML Files

  2.9.4-46.12.1

  lock rpm

  libxml2-2-32bit
  A Library to Manipulate XML Files

  2.9.4-46.12.1

  lock rpm

  libxml2-tools
  Tools using libxml

  2.9.4-46.12.1

  lock rpm

  python-libxml2
  Python Bindings for libxml2

  2.9.4-46.12.1

  lock rpm

  lock src