shield Security update for libxml2

SUSE-SLE-SDK-12-SP2-2018-276

This update for libxml2 fixes one issue. This security issue was fixed: - CVE-2017-15412: Prevent use after free when calling XPath extension functions that allowed remote attackers to cause DoS or potentially RCE (bsc#1077993) - CVE-2016-5131: Use-after-free vulnerability in libxml2 allowed remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function. (bsc#1078813) - CVE-2017-5130: Fixed a potential remote buffer overflow in function xmlMemoryStrdup() (bsc#1078806)

• Release Date
  Feb 8 2018
• References
  Bugzilla: 1077993, 1078813, 1078806
  CVEs: CVE-2016-5131, CVE-2017-5130, CVE-2017-15412
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.2 ppc64le

• Packages
  libxml2
  A Library to Manipulate XML Files

  2.9.4-46.12.1 lock src

  libxml2-devel
  Include Files and Libraries mandatory for Development

  2.9.4-46.12.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 aarch64

• Packages
  libxml2
  A Library to Manipulate XML Files

  2.9.4-46.12.1 lock src

  libxml2-devel
  Include Files and Libraries mandatory for Development

  2.9.4-46.12.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 s390x

• Packages
  libxml2
  A Library to Manipulate XML Files

  2.9.4-46.12.1 lock src

  libxml2-devel
  Include Files and Libraries mandatory for Development

  2.9.4-46.12.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 x86_64

• Packages
  libxml2
  A Library to Manipulate XML Files

  2.9.4-46.12.1 lock src

  libxml2-devel
  Include Files and Libraries mandatory for Development

  2.9.4-46.12.1 lock rpm