Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
libxml2-2-2.9.12-1.2 on GA media
Notes
Title of the patch
libxml2-2-2.9.12-1.2 on GA media
Description of the patch
These are all security issues fixed in the libxml2-2-2.9.12-1.2 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11016
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "libxml2-2-2.9.12-1.2 on GA media", title: "Title of the patch", }, { category: "description", text: "These are all security issues fixed in the libxml2-2-2.9.12-1.2 package on the GA media of openSUSE Tumbleweed.", title: "Description of the patch", }, { category: "details", text: "openSUSE-Tumbleweed-2024-11016", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11016-1.json", }, { category: "self", summary: "SUSE CVE CVE-2007-6284 page", url: "https://www.suse.com/security/cve/CVE-2007-6284/", }, { category: "self", summary: "SUSE CVE CVE-2016-4658 page", url: "https://www.suse.com/security/cve/CVE-2016-4658/", }, { category: "self", summary: "SUSE CVE CVE-2017-0663 page", url: "https://www.suse.com/security/cve/CVE-2017-0663/", }, { category: "self", summary: "SUSE CVE CVE-2017-5969 page", url: "https://www.suse.com/security/cve/CVE-2017-5969/", }, { category: "self", summary: "SUSE CVE CVE-2017-9047 page", url: "https://www.suse.com/security/cve/CVE-2017-9047/", }, { category: "self", summary: "SUSE CVE CVE-2017-9048 page", url: "https://www.suse.com/security/cve/CVE-2017-9048/", }, { category: "self", summary: "SUSE CVE CVE-2017-9049 page", url: "https://www.suse.com/security/cve/CVE-2017-9049/", }, { category: "self", summary: "SUSE CVE CVE-2018-14404 page", url: "https://www.suse.com/security/cve/CVE-2018-14404/", }, { category: "self", summary: "SUSE CVE CVE-2018-9251 page", url: "https://www.suse.com/security/cve/CVE-2018-9251/", }, { category: "self", summary: "SUSE CVE CVE-2019-19956 page", url: "https://www.suse.com/security/cve/CVE-2019-19956/", }, { category: "self", summary: "SUSE CVE CVE-2019-20388 page", url: "https://www.suse.com/security/cve/CVE-2019-20388/", }, { category: "self", summary: "SUSE CVE CVE-2020-24977 page", url: "https://www.suse.com/security/cve/CVE-2020-24977/", }, { category: "self", summary: "SUSE CVE CVE-2020-7595 page", url: "https://www.suse.com/security/cve/CVE-2020-7595/", }, { category: "self", summary: "SUSE CVE CVE-2021-3516 page", url: "https://www.suse.com/security/cve/CVE-2021-3516/", }, { category: "self", summary: "SUSE CVE CVE-2021-3517 page", url: "https://www.suse.com/security/cve/CVE-2021-3517/", }, { category: "self", summary: "SUSE CVE CVE-2021-3518 page", url: "https://www.suse.com/security/cve/CVE-2021-3518/", }, { category: "self", summary: "SUSE CVE CVE-2021-3537 page", url: "https://www.suse.com/security/cve/CVE-2021-3537/", }, { category: "self", summary: "SUSE CVE CVE-2021-3541 page", url: "https://www.suse.com/security/cve/CVE-2021-3541/", }, ], title: "libxml2-2-2.9.12-1.2 on GA media", tracking: { current_release_date: "2024-06-15T00:00:00Z", generator: { date: "2024-06-15T00:00:00Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "openSUSE-SU-2024:11016-1", initial_release_date: "2024-06-15T00:00:00Z", revision_history: [ { date: "2024-06-15T00:00:00Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "libxml2-2-2.9.12-1.2.aarch64", product: { name: "libxml2-2-2.9.12-1.2.aarch64", product_id: "libxml2-2-2.9.12-1.2.aarch64", }, }, { category: "product_version", name: "libxml2-2-32bit-2.9.12-1.2.aarch64", product: { name: "libxml2-2-32bit-2.9.12-1.2.aarch64", product_id: "libxml2-2-32bit-2.9.12-1.2.aarch64", }, }, { category: "product_version", name: "libxml2-devel-2.9.12-1.2.aarch64", product: { name: "libxml2-devel-2.9.12-1.2.aarch64", product_id: "libxml2-devel-2.9.12-1.2.aarch64", }, }, { category: "product_version", name: "libxml2-devel-32bit-2.9.12-1.2.aarch64", product: { name: "libxml2-devel-32bit-2.9.12-1.2.aarch64", product_id: "libxml2-devel-32bit-2.9.12-1.2.aarch64", }, }, { category: "product_version", name: "libxml2-doc-2.9.12-1.2.aarch64", product: { name: "libxml2-doc-2.9.12-1.2.aarch64", product_id: "libxml2-doc-2.9.12-1.2.aarch64", }, }, { category: "product_version", name: "libxml2-tools-2.9.12-1.2.aarch64", product: { name: "libxml2-tools-2.9.12-1.2.aarch64", product_id: "libxml2-tools-2.9.12-1.2.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "libxml2-2-2.9.12-1.2.ppc64le", product: { name: "libxml2-2-2.9.12-1.2.ppc64le", product_id: "libxml2-2-2.9.12-1.2.ppc64le", }, }, { category: "product_version", name: "libxml2-2-32bit-2.9.12-1.2.ppc64le", product: { name: "libxml2-2-32bit-2.9.12-1.2.ppc64le", product_id: "libxml2-2-32bit-2.9.12-1.2.ppc64le", }, }, { category: "product_version", name: "libxml2-devel-2.9.12-1.2.ppc64le", product: { name: "libxml2-devel-2.9.12-1.2.ppc64le", product_id: "libxml2-devel-2.9.12-1.2.ppc64le", }, }, { category: "product_version", name: "libxml2-devel-32bit-2.9.12-1.2.ppc64le", product: { name: "libxml2-devel-32bit-2.9.12-1.2.ppc64le", product_id: "libxml2-devel-32bit-2.9.12-1.2.ppc64le", }, }, { category: "product_version", name: "libxml2-doc-2.9.12-1.2.ppc64le", product: { name: "libxml2-doc-2.9.12-1.2.ppc64le", product_id: "libxml2-doc-2.9.12-1.2.ppc64le", }, }, { category: "product_version", name: "libxml2-tools-2.9.12-1.2.ppc64le", product: { name: "libxml2-tools-2.9.12-1.2.ppc64le", product_id: "libxml2-tools-2.9.12-1.2.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "libxml2-2-2.9.12-1.2.s390x", product: { name: "libxml2-2-2.9.12-1.2.s390x", product_id: "libxml2-2-2.9.12-1.2.s390x", }, }, { category: "product_version", name: "libxml2-2-32bit-2.9.12-1.2.s390x", product: { name: "libxml2-2-32bit-2.9.12-1.2.s390x", product_id: "libxml2-2-32bit-2.9.12-1.2.s390x", }, }, { category: "product_version", name: "libxml2-devel-2.9.12-1.2.s390x", product: { name: "libxml2-devel-2.9.12-1.2.s390x", product_id: "libxml2-devel-2.9.12-1.2.s390x", }, }, { category: "product_version", name: "libxml2-devel-32bit-2.9.12-1.2.s390x", product: { name: "libxml2-devel-32bit-2.9.12-1.2.s390x", product_id: "libxml2-devel-32bit-2.9.12-1.2.s390x", }, }, { category: "product_version", name: "libxml2-doc-2.9.12-1.2.s390x", product: { name: "libxml2-doc-2.9.12-1.2.s390x", product_id: "libxml2-doc-2.9.12-1.2.s390x", }, }, { category: "product_version", name: "libxml2-tools-2.9.12-1.2.s390x", product: { name: "libxml2-tools-2.9.12-1.2.s390x", product_id: "libxml2-tools-2.9.12-1.2.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "libxml2-2-2.9.12-1.2.x86_64", product: { name: "libxml2-2-2.9.12-1.2.x86_64", product_id: "libxml2-2-2.9.12-1.2.x86_64", }, }, { category: "product_version", name: "libxml2-2-32bit-2.9.12-1.2.x86_64", product: { name: "libxml2-2-32bit-2.9.12-1.2.x86_64", product_id: "libxml2-2-32bit-2.9.12-1.2.x86_64", }, }, { category: "product_version", name: "libxml2-devel-2.9.12-1.2.x86_64", product: { name: "libxml2-devel-2.9.12-1.2.x86_64", product_id: "libxml2-devel-2.9.12-1.2.x86_64", }, }, { category: "product_version", name: "libxml2-devel-32bit-2.9.12-1.2.x86_64", product: { name: "libxml2-devel-32bit-2.9.12-1.2.x86_64", product_id: "libxml2-devel-32bit-2.9.12-1.2.x86_64", }, }, { category: "product_version", name: "libxml2-doc-2.9.12-1.2.x86_64", product: { name: "libxml2-doc-2.9.12-1.2.x86_64", product_id: "libxml2-doc-2.9.12-1.2.x86_64", }, }, { category: "product_version", name: "libxml2-tools-2.9.12-1.2.x86_64", product: { name: "libxml2-tools-2.9.12-1.2.x86_64", product_id: "libxml2-tools-2.9.12-1.2.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "openSUSE Tumbleweed", product: { name: "openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed", product_identification_helper: { cpe: "cpe:/o:opensuse:tumbleweed", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "libxml2-2-2.9.12-1.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", }, product_reference: "libxml2-2-2.9.12-1.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-2-2.9.12-1.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", }, product_reference: "libxml2-2-2.9.12-1.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-2-2.9.12-1.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", }, product_reference: "libxml2-2-2.9.12-1.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-2-2.9.12-1.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", }, product_reference: "libxml2-2-2.9.12-1.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-2-32bit-2.9.12-1.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", }, product_reference: "libxml2-2-32bit-2.9.12-1.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-2-32bit-2.9.12-1.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", }, product_reference: "libxml2-2-32bit-2.9.12-1.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-2-32bit-2.9.12-1.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", }, product_reference: "libxml2-2-32bit-2.9.12-1.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-2-32bit-2.9.12-1.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", }, product_reference: "libxml2-2-32bit-2.9.12-1.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-devel-2.9.12-1.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", }, product_reference: "libxml2-devel-2.9.12-1.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-devel-2.9.12-1.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", }, product_reference: "libxml2-devel-2.9.12-1.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-devel-2.9.12-1.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", }, product_reference: "libxml2-devel-2.9.12-1.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-devel-2.9.12-1.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", }, product_reference: "libxml2-devel-2.9.12-1.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-devel-32bit-2.9.12-1.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", }, product_reference: "libxml2-devel-32bit-2.9.12-1.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-devel-32bit-2.9.12-1.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", }, product_reference: "libxml2-devel-32bit-2.9.12-1.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-devel-32bit-2.9.12-1.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", }, product_reference: "libxml2-devel-32bit-2.9.12-1.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-devel-32bit-2.9.12-1.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", }, product_reference: "libxml2-devel-32bit-2.9.12-1.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-doc-2.9.12-1.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", }, product_reference: "libxml2-doc-2.9.12-1.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-doc-2.9.12-1.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", }, product_reference: "libxml2-doc-2.9.12-1.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-doc-2.9.12-1.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", }, product_reference: "libxml2-doc-2.9.12-1.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-doc-2.9.12-1.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", }, product_reference: "libxml2-doc-2.9.12-1.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-tools-2.9.12-1.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", }, product_reference: "libxml2-tools-2.9.12-1.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-tools-2.9.12-1.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", }, product_reference: "libxml2-tools-2.9.12-1.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-tools-2.9.12-1.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", }, product_reference: "libxml2-tools-2.9.12-1.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libxml2-tools-2.9.12-1.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", }, product_reference: "libxml2-tools-2.9.12-1.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, ], }, vulnerabilities: [ { cve: "CVE-2007-6284", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2007-6284", }, ], notes: [ { category: "general", text: "The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2007-6284", url: "https://www.suse.com/security/cve/CVE-2007-6284", }, { category: "external", summary: "SUSE Bug 349151 for CVE-2007-6284", url: "https://bugzilla.suse.com/349151", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2007-6284", }, { cve: "CVE-2016-4658", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-4658", }, ], notes: [ { category: "general", text: "xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-4658", url: "https://www.suse.com/security/cve/CVE-2016-4658", }, { category: "external", summary: "SUSE Bug 1005544 for CVE-2016-4658", url: "https://bugzilla.suse.com/1005544", }, { category: "external", summary: "SUSE Bug 1014873 for CVE-2016-4658", url: "https://bugzilla.suse.com/1014873", }, { category: "external", summary: "SUSE Bug 1069433 for CVE-2016-4658", url: "https://bugzilla.suse.com/1069433", }, { category: "external", summary: "SUSE Bug 1078813 for CVE-2016-4658", url: "https://bugzilla.suse.com/1078813", }, { category: "external", summary: "SUSE Bug 1123919 for CVE-2016-4658", url: "https://bugzilla.suse.com/1123919", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-4658", }, { cve: "CVE-2017-0663", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-0663", }, ], notes: [ { category: "general", text: "A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-0663", url: "https://www.suse.com/security/cve/CVE-2017-0663", }, { category: "external", summary: "SUSE Bug 1044337 for CVE-2017-0663", url: "https://bugzilla.suse.com/1044337", }, { category: "external", summary: "SUSE Bug 1123919 for CVE-2017-0663", url: "https://bugzilla.suse.com/1123919", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.1, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2017-0663", }, { cve: "CVE-2017-5969", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5969", }, ], notes: [ { category: "general", text: "** DISPUTED ** libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states \"I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser.\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5969", url: "https://www.suse.com/security/cve/CVE-2017-5969", }, { category: "external", summary: "SUSE Bug 1024989 for CVE-2017-5969", url: "https://bugzilla.suse.com/1024989", }, { category: "external", summary: "SUSE Bug 1123919 for CVE-2017-5969", url: "https://bugzilla.suse.com/1123919", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.7, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-5969", }, { cve: "CVE-2017-9047", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-9047", }, ], notes: [ { category: "general", text: "A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content->type is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits) whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write about \"size\" many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2, such as PHP, to crash.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-9047", url: "https://www.suse.com/security/cve/CVE-2017-9047", }, { category: "external", summary: "SUSE Bug 1039063 for CVE-2017-9047", url: "https://bugzilla.suse.com/1039063", }, { category: "external", summary: "SUSE Bug 1039066 for CVE-2017-9047", url: "https://bugzilla.suse.com/1039066", }, { category: "external", summary: "SUSE Bug 1039657 for CVE-2017-9047", url: "https://bugzilla.suse.com/1039657", }, { category: "external", summary: "SUSE Bug 1123919 for CVE-2017-9047", url: "https://bugzilla.suse.com/1123919", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-9047", }, { cve: "CVE-2017-9048", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-9048", }, ], notes: [ { category: "general", text: "libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes programs that use libxml2, such as PHP, to crash.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-9048", url: "https://www.suse.com/security/cve/CVE-2017-9048", }, { category: "external", summary: "SUSE Bug 1039064 for CVE-2017-9048", url: "https://bugzilla.suse.com/1039064", }, { category: "external", summary: "SUSE Bug 1039066 for CVE-2017-9048", url: "https://bugzilla.suse.com/1039066", }, { category: "external", summary: "SUSE Bug 1039658 for CVE-2017-9048", url: "https://bugzilla.suse.com/1039658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-9048", }, { cve: "CVE-2017-9049", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-9049", }, ], notes: [ { category: "general", text: "libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-9049", url: "https://www.suse.com/security/cve/CVE-2017-9049", }, { category: "external", summary: "SUSE Bug 1039063 for CVE-2017-9049", url: "https://bugzilla.suse.com/1039063", }, { category: "external", summary: "SUSE Bug 1039064 for CVE-2017-9049", url: "https://bugzilla.suse.com/1039064", }, { category: "external", summary: "SUSE Bug 1039066 for CVE-2017-9049", url: "https://bugzilla.suse.com/1039066", }, { category: "external", summary: "SUSE Bug 1039659 for CVE-2017-9049", url: "https://bugzilla.suse.com/1039659", }, { category: "external", summary: "SUSE Bug 1039661 for CVE-2017-9049", url: "https://bugzilla.suse.com/1039661", }, { category: "external", summary: "SUSE Bug 1069690 for CVE-2017-9049", url: "https://bugzilla.suse.com/1069690", }, { category: "external", summary: "SUSE Bug 1123919 for CVE-2017-9049", url: "https://bugzilla.suse.com/1123919", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2017-9049", }, { cve: "CVE-2018-14404", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-14404", }, ], notes: [ { category: "general", text: "A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-14404", url: "https://www.suse.com/security/cve/CVE-2018-14404", }, { category: "external", summary: "SUSE Bug 1102046 for CVE-2018-14404", url: "https://bugzilla.suse.com/1102046", }, { category: "external", summary: "SUSE Bug 1148896 for CVE-2018-14404", url: "https://bugzilla.suse.com/1148896", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-14404", }, { cve: "CVE-2018-9251", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-9251", }, ], notes: [ { category: "general", text: "The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-9251", url: "https://www.suse.com/security/cve/CVE-2018-9251", }, { category: "external", summary: "SUSE Bug 1088279 for CVE-2018-9251", url: "https://bugzilla.suse.com/1088279", }, { category: "external", summary: "SUSE Bug 1088601 for CVE-2018-9251", url: "https://bugzilla.suse.com/1088601", }, { category: "external", summary: "SUSE Bug 1105166 for CVE-2018-9251", url: "https://bugzilla.suse.com/1105166", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.3, baseSeverity: "LOW", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2018-9251", }, { cve: "CVE-2019-19956", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2019-19956", }, ], notes: [ { category: "general", text: "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2019-19956", url: "https://www.suse.com/security/cve/CVE-2019-19956", }, { category: "external", summary: "SUSE Bug 1159928 for CVE-2019-19956", url: "https://bugzilla.suse.com/1159928", }, { category: "external", summary: "SUSE Bug 1191860 for CVE-2019-19956", url: "https://bugzilla.suse.com/1191860", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2019-19956", }, { cve: "CVE-2019-20388", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2019-20388", }, ], notes: [ { category: "general", text: "xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2019-20388", url: "https://www.suse.com/security/cve/CVE-2019-20388", }, { category: "external", summary: "SUSE Bug 1161521 for CVE-2019-20388", url: "https://bugzilla.suse.com/1161521", }, { category: "external", summary: "SUSE Bug 1191860 for CVE-2019-20388", url: "https://bugzilla.suse.com/1191860", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.1, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2019-20388", }, { cve: "CVE-2020-24977", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-24977", }, ], notes: [ { category: "general", text: "GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-24977", url: "https://www.suse.com/security/cve/CVE-2020-24977", }, { category: "external", summary: "SUSE Bug 1176179 for CVE-2020-24977", url: "https://bugzilla.suse.com/1176179", }, { category: "external", summary: "SUSE Bug 1191860 for CVE-2020-24977", url: "https://bugzilla.suse.com/1191860", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, products: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-24977", }, { cve: "CVE-2020-7595", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-7595", }, ], notes: [ { category: "general", text: "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-7595", url: "https://www.suse.com/security/cve/CVE-2020-7595", }, { category: "external", summary: "SUSE Bug 1161517 for CVE-2020-7595", url: "https://bugzilla.suse.com/1161517", }, { category: "external", summary: "SUSE Bug 1191860 for CVE-2020-7595", url: "https://bugzilla.suse.com/1191860", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-7595", }, { cve: "CVE-2021-3516", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2021-3516", }, ], notes: [ { category: "general", text: "There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2021-3516", url: "https://www.suse.com/security/cve/CVE-2021-3516", }, { category: "external", summary: "SUSE Bug 1185409 for CVE-2021-3516", url: "https://bugzilla.suse.com/1185409", }, { category: "external", summary: "SUSE Bug 1191860 for CVE-2021-3516", url: "https://bugzilla.suse.com/1191860", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2021-3516", }, { cve: "CVE-2021-3517", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2021-3517", }, ], notes: [ { category: "general", text: "There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2021-3517", url: "https://www.suse.com/security/cve/CVE-2021-3517", }, { category: "external", summary: "SUSE Bug 1185410 for CVE-2021-3517", url: "https://bugzilla.suse.com/1185410", }, { category: "external", summary: "SUSE Bug 1191860 for CVE-2021-3517", url: "https://bugzilla.suse.com/1191860", }, { category: "external", summary: "SUSE Bug 1194438 for CVE-2021-3517", url: "https://bugzilla.suse.com/1194438", }, { category: "external", summary: "SUSE Bug 1196383 for CVE-2021-3517", url: "https://bugzilla.suse.com/1196383", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.6, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2021-3517", }, { cve: "CVE-2021-3518", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2021-3518", }, ], notes: [ { category: "general", text: "There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2021-3518", url: "https://www.suse.com/security/cve/CVE-2021-3518", }, { category: "external", summary: "SUSE Bug 1185408 for CVE-2021-3518", url: "https://bugzilla.suse.com/1185408", }, { category: "external", summary: "SUSE Bug 1191860 for CVE-2021-3518", url: "https://bugzilla.suse.com/1191860", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2021-3518", }, { cve: "CVE-2021-3537", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2021-3537", }, ], notes: [ { category: "general", text: "A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2021-3537", url: "https://www.suse.com/security/cve/CVE-2021-3537", }, { category: "external", summary: "SUSE Bug 1185698 for CVE-2021-3537", url: "https://bugzilla.suse.com/1185698", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2021-3537", }, { cve: "CVE-2021-3541", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2021-3541", }, ], notes: [ { category: "general", text: "A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2021-3541", url: "https://www.suse.com/security/cve/CVE-2021-3541", }, { category: "external", summary: "SUSE Bug 1186015 for CVE-2021-3541", url: "https://bugzilla.suse.com/1186015", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x", "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2021-3541", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.