Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2017-9047, CVE-2017-9048: The function xmlSnprintfElementContent in valid.c was vulnerable to a stack buffer overflow (bsc#1039063, bsc#1039064) - CVE-2017-9049: The function xmlDictComputeFastKey in dict.c was vulnerable to a heap-based buffer over-read. (bsc#1039066) - CVE-2017-9050: The function xmlDictAddString was vulnerable to a heap-based buffer over-read (bsc#1039661) - CVE-2016-1839: heap-based buffer overflow (xmlDictAddString func) (bnc#1039069)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for libxml2 fixes the following issues: - CVE-2017-9047, CVE-2017-9048: The function xmlSnprintfElementContent in valid.c was vulnerable to a stack buffer overflow (bsc#1039063, bsc#1039064) - CVE-2017-9049: The function xmlDictComputeFastKey in dict.c was vulnerable to a heap-based buffer over-read. (bsc#1039066) - CVE-2017-9050: The function xmlDictAddString was vulnerable to a heap-based buffer over-read (bsc#1039661) - CVE-2016-1839: heap-based buffer overflow (xmlDictAddString func) (bnc#1039069)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1039063
- https://bugzilla.suse.com/1039064
- https://bugzilla.suse.com/1039066
- https://bugzilla.suse.com/1039069
- https://bugzilla.suse.com/1039661
- https://bugzilla.suse.com/981114
- https://www.suse.com/security/cve/CVE-2016-1839
- https://www.suse.com/security/cve/CVE-2017-9047
- https://www.suse.com/security/cve/CVE-2017-9048
- https://www.suse.com/security/cve/CVE-2017-9049
- https://www.suse.com/security/cve/CVE-2017-9050
- https://www.suse.com/support/update/announcement/2017/suse-su-20171454-1/