← Search the atlas
SUSE-SU-2023:2048-1
Not scored
Security update for libxml2
This update for libxml2 fixes the following issues:
- CVE-2023-29469: Fixed inconsistent result when hashing empty strings (bsc#1210412).
- CVE-2023-28484: Fixed NULL pointer dereference in xmlSchemaFixupComplexType (bsc#1210411).
- CVE-2022-29824: Fixed integer overflow leading to out-of-bounds write in buf.c (bsc#1199132).
The following non-security bugs were fixed:
- Added W3C conformance tests to the testsuite (bsc#1204585).
- Fixed NULL pointer dereference when parsing invalid data (glgo#libxml2!15) (bsc#1065270) .
Exploit probability
Not scored
Published
April 26, 2023
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
SUSE:Linux Enterprise Server 15 SP2-LTSS
libxml2
SUSE:Manager Proxy 4.2
python-libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
python-libxml2-python
SUSE:Enterprise Storage 7
libxml2
SUSE:Linux Enterprise Real Time 15 SP3
python-libxml2-python
SUSE:Manager Proxy 4.2
libxml2
SUSE:Linux Enterprise Micro 5.2
libxml2
SUSE:Linux Enterprise Server 15 SP2-LTSS
python-libxml2-python
SUSE:Manager Server 4.2
python-libxml2-python
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
libxml2
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
python-libxml2-python
SUSE:Linux Enterprise Server 15 SP1-LTSS
libxml2
SUSE:Linux Enterprise Server 15 SP1-LTSS
python-libxml2-python
SUSE:Linux Enterprise Server 15 SP3-LTSS
python-libxml2-python
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
python-libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
python-libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
libxml2
SUSE:Enterprise Storage 7.1
python-libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
libxml2
SUSE:Enterprise Storage 7
python-libxml2-python
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
python-libxml2-python
SUSE:Enterprise Storage 7.1
libxml2
SUSE:Linux Enterprise Server 15 SP3-LTSS
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
libxml2
SUSE:Linux Enterprise Real Time 15 SP3
libxml2
SUSE:Linux Enterprise Micro 5.1
libxml2
SUSE:Linux Enterprise Micro 5.2
python-libxml2-python
openSUSE:Leap 15.4
python-libxml2-python
SUSE:Manager Server 4.2
libxml2
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
python-libxml2-python
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
python-libxml2-python
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2023:2048-1
This update for libxml2 fixes the following issues:
- CVE-2023-29469: Fixed inconsistent result when hashing empty strings (bsc#1210412).
- CVE-2023-28484: Fixed NULL pointer dereference in xmlSchemaFixupComplexType (bsc#1210411).
- CVE-2022-29824: Fixed integer overflow leading to out-of-bounds write in buf.c (bsc#1199132).
The following non-security bugs were fixed:
- Added W3C conformance tests to the testsuite (bsc#1204585).
- Fixed NULL pointer dereference when parsing invalid data (glgo#libxml2!15) (bsc#1065270) .
View original source ↗
05 / REFERENCES
Further evidence