RHSA-2016:1292

Vulnerability from csaf_opensuse - Published: 2016-06-23 00:00 - Updated: 2026-09-20 10:56
Summary
security update for libxml2
Severity
Important
Notes
Title of the patch: security update for libxml2
Description of the patch: This security update provides a functional equivalent of RHSA-2016:1292. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2016:1292.
Patchnames: RHSA-2016:1292
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2016-1762
8.1 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2016-1833
5.5 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 7 products, the same list as for CVE-2016-1762
Threats
Impact moderate
CVE-2016-1834
7.8 (High)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 7 products, the same list as for CVE-2016-1762
Threats
Impact moderate
CVE-2016-1835
8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 7 products, the same list as for CVE-2016-1762
Threats
Impact moderate
CVE-2016-1836
5.5 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 7 products, the same list as for CVE-2016-1762
Threats
Impact moderate
CVE-2016-1837
5.5 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 7 products, the same list as for CVE-2016-1762
Threats
Impact moderate
CVE-2016-1838
5.5 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 7 products, the same list as for CVE-2016-1762
Threats
Impact moderate
CVE-2016-1839
6.5 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
Affected products
Recommended 7 products, the same list as for CVE-2016-1762
Threats
Impact moderate
CVE-2016-1840
7.8 (High)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 7 products, the same list as for CVE-2016-1762
Threats
Impact moderate
CVE-2016-3627
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 7 products, the same list as for CVE-2016-1762
Threats
Impact moderate
CVE-2016-3705
7.5 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 7 products, the same list as for CVE-2016-1762
Threats
Impact important
CVE-2016-4447
7.5 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 7 products, the same list as for CVE-2016-1762
Threats
Impact moderate
CVE-2016-4448
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 7 products, the same list as for CVE-2016-1762
Threats
Impact moderate
CVE-2016-4449
7.1 (High)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Affected products
Recommended 7 products, the same list as for CVE-2016-1762
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/r… self
https://www.suse.com/security/cve/CVE-2016-1762/ self
https://www.suse.com/security/cve/CVE-2016-1833/ self
https://www.suse.com/security/cve/CVE-2016-1834/ self
https://www.suse.com/security/cve/CVE-2016-1835/ self
https://www.suse.com/security/cve/CVE-2016-1836/ self
https://www.suse.com/security/cve/CVE-2016-1837/ self
https://www.suse.com/security/cve/CVE-2016-1838/ self
https://www.suse.com/security/cve/CVE-2016-1839/ self
https://www.suse.com/security/cve/CVE-2016-1840/ self
https://www.suse.com/security/cve/CVE-2016-3627/ self
https://www.suse.com/security/cve/CVE-2016-3705/ self
https://www.suse.com/security/cve/CVE-2016-4447/ self
https://www.suse.com/security/cve/CVE-2016-4448/ self
https://www.suse.com/security/cve/CVE-2016-4449/ self
https://www.suse.com/security/cve/CVE-2016-1762 external
https://bugzilla.suse.com/1123919 external
https://bugzilla.suse.com/981040 external
https://www.suse.com/security/cve/CVE-2016-1833 external
https://bugzilla.suse.com/1123919 external
https://bugzilla.suse.com/981108 external
https://www.suse.com/security/cve/CVE-2016-1834 external
https://bugzilla.suse.com/1123919 external
https://bugzilla.suse.com/981041 external
https://www.suse.com/security/cve/CVE-2016-1835 external
https://bugzilla.suse.com/1123919 external
https://bugzilla.suse.com/981109 external
https://www.suse.com/security/cve/CVE-2016-1836 external
https://bugzilla.suse.com/1174862 external
https://bugzilla.suse.com/981110 external
https://www.suse.com/security/cve/CVE-2016-1837 external
https://bugzilla.suse.com/1123919 external
https://bugzilla.suse.com/981111 external
https://www.suse.com/security/cve/CVE-2016-1838 external
https://bugzilla.suse.com/1123919 external
https://bugzilla.suse.com/981112 external
https://www.suse.com/security/cve/CVE-2016-1839 external
https://bugzilla.suse.com/1039069 external
https://bugzilla.suse.com/1039661 external
https://bugzilla.suse.com/1069433 external
https://bugzilla.suse.com/1069690 external
https://bugzilla.suse.com/1123919 external
https://bugzilla.suse.com/963963 external
https://bugzilla.suse.com/981114 external
https://www.suse.com/security/cve/CVE-2016-1840 external
https://bugzilla.suse.com/1123919 external
https://bugzilla.suse.com/981115 external
https://www.suse.com/security/cve/CVE-2016-3627 external
https://bugzilla.suse.com/1026099 external
https://bugzilla.suse.com/1026101 external
https://bugzilla.suse.com/1123919 external
https://bugzilla.suse.com/972335 external
https://bugzilla.suse.com/975947 external
https://www.suse.com/security/cve/CVE-2016-3705 external
https://bugzilla.suse.com/1017497 external
https://bugzilla.suse.com/1123919 external
https://bugzilla.suse.com/975947 external
https://www.suse.com/security/cve/CVE-2016-4447 external
https://bugzilla.suse.com/1123919 external
https://bugzilla.suse.com/981548 external
https://www.suse.com/security/cve/CVE-2016-4448 external
https://bugzilla.suse.com/1010299 external
https://bugzilla.suse.com/1123919 external
https://bugzilla.suse.com/981549 external
https://www.suse.com/security/cve/CVE-2016-4449 external
https://bugzilla.suse.com/1123919 external
https://bugzilla.suse.com/981550 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for libxml2",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2016:1292.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2016:1292.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2016:1292",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2016_1292.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1762 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1762/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1833 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1833/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1834 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1834/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1835 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1835/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1836 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1836/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1837 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1837/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1838 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1838/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1839 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1839/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1840 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1840/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3627 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3627/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3705 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3705/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-4447 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-4447/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-4448 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-4448/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-4449 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-4449/"
      }
    ],
    "title": "security update for libxml2",
    "tracking": {
      "current_release_date": "2026-09-20T10:56:57Z",
      "generator": {
        "date": "2016-06-23T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2016:1292",
      "initial_release_date": "2016-06-23T00:00:00Z",
      "revision_history": [
        {
          "date": "2016-06-23T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T10:56:57Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libxml2-0:2.9.1-6.el7_2.3.i686",
                "product": {
                  "name": "libxml2-0:2.9.1-6.el7_2.3.i686",
                  "product_id": "libxml2-0:2.9.1-6.el7_2.3.i686",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:xmlsoft:libxml2:2.9.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libxml2@2.9.1-6.el7_2.3?arch=i686\u0026upstream=libxml2-0:2.9.1-6.el7_2.3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-devel-0:2.9.1-6.el7_2.3.i686",
                "product": {
                  "name": "libxml2-devel-0:2.9.1-6.el7_2.3.i686",
                  "product_id": "libxml2-devel-0:2.9.1-6.el7_2.3.i686",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:xmlsoft:libxml2:2.9.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libxml2-devel@2.9.1-6.el7_2.3?arch=i686\u0026upstream=libxml2-0:2.9.1-6.el7_2.3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-static-0:2.9.1-6.el7_2.3.i686",
                "product": {
                  "name": "libxml2-static-0:2.9.1-6.el7_2.3.i686",
                  "product_id": "libxml2-static-0:2.9.1-6.el7_2.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libxml2-static@2.9.1-6.el7_2.3?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libxml2-0:2.9.1-6.el7_2.3.x86_64",
                "product": {
                  "name": "libxml2-0:2.9.1-6.el7_2.3.x86_64",
                  "product_id": "libxml2-0:2.9.1-6.el7_2.3.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:xmlsoft:libxml2:2.9.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libxml2@2.9.1-6.el7_2.3?arch=x86_64\u0026upstream=libxml2-0:2.9.1-6.el7_2.3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
                "product": {
                  "name": "libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
                  "product_id": "libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:xmlsoft:libxml2:2.9.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libxml2-devel@2.9.1-6.el7_2.3?arch=x86_64\u0026upstream=libxml2-0:2.9.1-6.el7_2.3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
                "product": {
                  "name": "libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
                  "product_id": "libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:xmlsoft:libxml2:2.9.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64\u0026upstream=libxml2-python-0:2.9.1-6.el7_2.3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-static-0:2.9.1-6.el7_2.3.x86_64",
                "product": {
                  "name": "libxml2-static-0:2.9.1-6.el7_2.3.x86_64",
                  "product_id": "libxml2-static-0:2.9.1-6.el7_2.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libxml2-static@2.9.1-6.el7_2.3?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-0:2.9.1-6.el7_2.3.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686"
        },
        "product_reference": "libxml2-0:2.9.1-6.el7_2.3.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-0:2.9.1-6.el7_2.3.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64"
        },
        "product_reference": "libxml2-0:2.9.1-6.el7_2.3.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-devel-0:2.9.1-6.el7_2.3.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686"
        },
        "product_reference": "libxml2-devel-0:2.9.1-6.el7_2.3.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-devel-0:2.9.1-6.el7_2.3.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64"
        },
        "product_reference": "libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-python-0:2.9.1-6.el7_2.3.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64"
        },
        "product_reference": "libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-static-0:2.9.1-6.el7_2.3.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686"
        },
        "product_reference": "libxml2-static-0:2.9.1-6.el7_2.3.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-static-0:2.9.1-6.el7_2.3.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
        },
        "product_reference": "libxml2-static-0:2.9.1-6.el7_2.3.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-1762",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1762"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1762",
          "url": "https://www.suse.com/security/cve/CVE-2016-1762"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-1762",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981040 for CVE-2016-1762",
          "url": "https://bugzilla.suse.com/981040"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1762"
    },
    {
      "cve": "CVE-2016-1833",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1833"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1833",
          "url": "https://www.suse.com/security/cve/CVE-2016-1833"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-1833",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981108 for CVE-2016-1833",
          "url": "https://bugzilla.suse.com/981108"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1833"
    },
    {
      "cve": "CVE-2016-1834",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1834"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1834",
          "url": "https://www.suse.com/security/cve/CVE-2016-1834"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-1834",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981041 for CVE-2016-1834",
          "url": "https://bugzilla.suse.com/981041"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1834"
    },
    {
      "cve": "CVE-2016-1835",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1835"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remote attackers to cause a denial of service via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1835",
          "url": "https://www.suse.com/security/cve/CVE-2016-1835"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-1835",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981109 for CVE-2016-1835",
          "url": "https://bugzilla.suse.com/981109"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1835"
    },
    {
      "cve": "CVE-2016-1836",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1836"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1836",
          "url": "https://www.suse.com/security/cve/CVE-2016-1836"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1174862 for CVE-2016-1836",
          "url": "https://bugzilla.suse.com/1174862"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981110 for CVE-2016-1836",
          "url": "https://bugzilla.suse.com/981110"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1836"
    },
    {
      "cve": "CVE-2016-1837",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1837"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1837",
          "url": "https://www.suse.com/security/cve/CVE-2016-1837"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-1837",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981111 for CVE-2016-1837",
          "url": "https://bugzilla.suse.com/981111"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1837"
    },
    {
      "cve": "CVE-2016-1838",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1838"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1838",
          "url": "https://www.suse.com/security/cve/CVE-2016-1838"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-1838",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981112 for CVE-2016-1838",
          "url": "https://bugzilla.suse.com/981112"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1838"
    },
    {
      "cve": "CVE-2016-1839",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1839"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1839",
          "url": "https://www.suse.com/security/cve/CVE-2016-1839"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1039069 for CVE-2016-1839",
          "url": "https://bugzilla.suse.com/1039069"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1039661 for CVE-2016-1839",
          "url": "https://bugzilla.suse.com/1039661"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1069433 for CVE-2016-1839",
          "url": "https://bugzilla.suse.com/1069433"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1069690 for CVE-2016-1839",
          "url": "https://bugzilla.suse.com/1069690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-1839",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 963963 for CVE-2016-1839",
          "url": "https://bugzilla.suse.com/963963"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981114 for CVE-2016-1839",
          "url": "https://bugzilla.suse.com/981114"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1839"
    },
    {
      "cve": "CVE-2016-1840",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1840"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1840",
          "url": "https://www.suse.com/security/cve/CVE-2016-1840"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-1840",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981115 for CVE-2016-1840",
          "url": "https://bugzilla.suse.com/981115"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1840"
    },
    {
      "cve": "CVE-2016-3627",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3627"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3627",
          "url": "https://www.suse.com/security/cve/CVE-2016-3627"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1026099 for CVE-2016-3627",
          "url": "https://bugzilla.suse.com/1026099"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1026101 for CVE-2016-3627",
          "url": "https://bugzilla.suse.com/1026101"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-3627",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 972335 for CVE-2016-3627",
          "url": "https://bugzilla.suse.com/972335"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 975947 for CVE-2016-3627",
          "url": "https://bugzilla.suse.com/975947"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-3627"
    },
    {
      "cve": "CVE-2016-3705",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3705"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do not properly keep track of the recursion depth, which allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a crafted XML document containing a large number of nested entity references.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3705",
          "url": "https://www.suse.com/security/cve/CVE-2016-3705"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1017497 for CVE-2016-3705",
          "url": "https://bugzilla.suse.com/1017497"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-3705",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 975947 for CVE-2016-3705",
          "url": "https://bugzilla.suse.com/975947"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-23T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-3705"
    },
    {
      "cve": "CVE-2016-4447",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-4447"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-4447",
          "url": "https://www.suse.com/security/cve/CVE-2016-4447"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-4447",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981548 for CVE-2016-4447",
          "url": "https://bugzilla.suse.com/981548"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-4447"
    },
    {
      "cve": "CVE-2016-4448",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-4448"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-4448",
          "url": "https://www.suse.com/security/cve/CVE-2016-4448"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010299 for CVE-2016-4448",
          "url": "https://bugzilla.suse.com/1010299"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-4448",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981549 for CVE-2016-4448",
          "url": "https://bugzilla.suse.com/981549"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-4448"
    },
    {
      "cve": "CVE-2016-4449",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-4449"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4, when not in validating mode, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
          "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-4449",
          "url": "https://www.suse.com/security/cve/CVE-2016-4449"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-4449",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981550 for CVE-2016-4449",
          "url": "https://bugzilla.suse.com/981550"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-devel-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-python-0:2.9.1-6.el7_2.3.x86_64",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.i686",
            "SUSE Liberty Linux 7:libxml2-static-0:2.9.1-6.el7_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-4449"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.