SUSE-SU-2016:1604-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2016/suse-su-20161604-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2016:1604-1

Related

Published

2016-06-17T09:21:30Z

Modified

2016-06-17T09:21:30Z

Summary

Security update for libxml2

Details

This update for libxml2 fixes the following security issues:

CVE-2016-2073, CVE-2015-8806, CVE-2016-1839: A Heap-buffer overread was fixed in libxml2/dict.c [bsc#963963, bsc#965283, bsc#981114].
CVE-2016-4483: Code was added to avoid an out of bound access when serializing malformed strings [bsc#978395].
CVE-2016-1762: Fixed a heap-based buffer overread in xmlNextChar [bsc#981040].
CVE-2016-1834: Fixed a heap-buffer-overflow in xmlStrncat [bsc#981041].
CVE-2016-1833: Fixed a heap-based buffer overread in htmlCurrentChar [bsc#981108].
CVE-2016-1835: Fixed a heap use-after-free in xmlSAX2AttributeNs [bsc#981109].
CVE-2016-1837: Fixed a heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral [bsc#981111].
CVE-2016-1838: Fixed a heap-based buffer overread in xmlParserPrintFileContextInternal [bsc#981112].
CVE-2016-1840: Fixed a heap-buffer-overflow in xmlFAParsePosCharGroup [bsc#981115].
CVE-2016-4447: Fixed a heap-based buffer-underreads due to xmlParseName [bsc#981548].
CVE-2016-4448: Fixed some format string warnings with possible format string vulnerability [bsc#981549],
CVE-2016-4449: Fixed inappropriate fetch of entities content [bsc#981550].
CVE-2016-3705: Fixed missing increment of recursion counter.

References

Affected packages

SUSE:Linux Enterprise Software Development Kit 11 SP4 / libxml2

Package

Name: libxml2
Purl: pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-0.44.1

Ecosystem specific

{
    "binaries": [
        {
            "libxml2-devel-32bit": "2.7.6-0.44.1",
            "libxml2-devel": "2.7.6-0.44.1"
        }
    ]
}

SUSE:OpenStack Cloud 5 / libxml2

Package

Name: libxml2
Purl: pkg:rpm/suse/libxml2&distro=SUSE%20OpenStack%20Cloud%205

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-0.44.1

Ecosystem specific

{
    "binaries": [
        {
            "libxml2": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

SUSE:OpenStack Cloud 5 / libxml2-python

Package

Name: libxml2-python
Purl: pkg:rpm/suse/libxml2-python&distro=SUSE%20OpenStack%20Cloud%205

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-0.44.4

Ecosystem specific

{
    "binaries": [
        {
            "libxml2": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

SUSE:Manager 2.1 / libxml2

Package

Name: libxml2
Purl: pkg:rpm/suse/libxml2&distro=SUSE%20Manager%202.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-0.44.1

Ecosystem specific

{
    "binaries": [
        {
            "libxml2": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

SUSE:Manager 2.1 / libxml2-python

Package

Name: libxml2-python
Purl: pkg:rpm/suse/libxml2-python&distro=SUSE%20Manager%202.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-0.44.4

Ecosystem specific

{
    "binaries": [
        {
            "libxml2": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

SUSE:Manager Proxy 2.1 / libxml2

Package

Name: libxml2
Purl: pkg:rpm/suse/libxml2&distro=SUSE%20Manager%20Proxy%202.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-0.44.1

Ecosystem specific

{
    "binaries": [
        {
            "libxml2": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

SUSE:Manager Proxy 2.1 / libxml2-python

Package

Name: libxml2-python
Purl: pkg:rpm/suse/libxml2-python&distro=SUSE%20Manager%20Proxy%202.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-0.44.4

Ecosystem specific

{
    "binaries": [
        {
            "libxml2": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP2-LTSS / libxml2

Package

Name: libxml2
Purl: pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-0.44.1

Ecosystem specific

{
    "binaries": [
        {
            "libxml2": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP2-LTSS / libxml2-python

Package

Name: libxml2-python
Purl: pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-0.44.4

Ecosystem specific

{
    "binaries": [
        {
            "libxml2": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP3-LTSS / libxml2

Package

Name: libxml2
Purl: pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-0.44.1

Ecosystem specific

{
    "binaries": [
        {
            "libxml2": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP3-LTSS / libxml2-python

Package

Name: libxml2-python
Purl: pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-0.44.4

Ecosystem specific

{
    "binaries": [
        {
            "libxml2": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP3-TERADATA / libxml2

Package

Name: libxml2
Purl: pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-0.44.1

Ecosystem specific

{
    "binaries": [
        {
            "libxml2": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP3-TERADATA / libxml2-python

Package

Name: libxml2-python
Purl: pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-0.44.4

Ecosystem specific

{
    "binaries": [
        {
            "libxml2": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP4 / libxml2

Package

Name: libxml2
Purl: pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-0.44.1

Ecosystem specific

{
    "binaries": [
        {
            "libxml2": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-x86": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP4 / libxml2-python

Package

Name: libxml2-python
Purl: pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-0.44.4

Ecosystem specific

{
    "binaries": [
        {
            "libxml2": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-x86": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 11 SP4 / libxml2

Package

Name: libxml2
Purl: pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-0.44.1

Ecosystem specific

{
    "binaries": [
        {
            "libxml2": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-x86": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 11 SP4 / libxml2-python

Package

Name: libxml2-python
Purl: pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-0.44.4

Ecosystem specific

{
    "binaries": [
        {
            "libxml2": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-x86": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}