shield Security update for libxml2

SUSE-SLE-SDK-12-SP2-2017-891

This update for libxml2 fixes the following issues: - CVE-2017-9047, CVE-2017-9048: The function xmlSnprintfElementContent in valid.c was vulnerable to a stack buffer overflow (bsc#1039063, bsc#1039064) - CVE-2017-9049: The function xmlDictComputeFastKey in dict.c was vulnerable to a heap-based buffer over-read. (bsc#1039066) - CVE-2017-9050: The function xmlDictAddString was vulnerable to a heap-based buffer over-read (bsc#1039661) - CVE-2016-1839: heap-based buffer overflow (xmlDictAddString func) (bnc#1039069)

• Release Date
  May 30 2017
• References
  Bugzilla: 1039069, 1039064, 1039066, 1039661, 1039063, 981114
  CVEs: CVE-2017-9047, CVE-2017-9048, CVE-2017-9049, CVE-2017-9050, CVE-2016-1839
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.2 aarch64

• Packages
  libxml2
  A Library to Manipulate XML Files

  2.9.4-36.1 lock src

  libxml2-devel
  Include Files and Libraries mandatory for Development

  2.9.4-36.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 ppc64le

• Packages
  libxml2
  A Library to Manipulate XML Files

  2.9.4-36.1 lock src

  libxml2-devel
  Include Files and Libraries mandatory for Development

  2.9.4-36.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 s390x

• Packages
  libxml2
  A Library to Manipulate XML Files

  2.9.4-36.1 lock src

  libxml2-devel
  Include Files and Libraries mandatory for Development

  2.9.4-36.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 x86_64

• Packages
  libxml2
  A Library to Manipulate XML Files

  2.9.4-36.1 lock src

  libxml2-devel
  Include Files and Libraries mandatory for Development

  2.9.4-36.1 lock rpm