Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-12:Update
patchinfo.2672
_patchinfo
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File _patchinfo of Package patchinfo.2672
<patchinfo incident="2672"> <issue id="981550" tracker="bnc">VUL-0: CVE-2016-4449: libxml2: Inappropriate fetch of entities content</issue> <issue id="981549" tracker="bnc">VUL-0: CVE-2016-4448: libxml2: Format string vulnerability</issue> <issue id="978395" tracker="bnc">VUL-1: CVE-2016-4483: libxml2: out-of-bounds read parsing an XML using recover mode</issue> <issue id="981111" tracker="bnc">VUL-0: CVE-2016-1837: libxml2: Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral</issue> <issue id="981112" tracker="bnc">VUL-0: CVE-2016-1838: libxml2: Heap-based buffer overread in xmlParserPrintFileContextInternal</issue> <issue id="981548" tracker="bnc">VUL-0: CVE-2016-4447: libxml2: Heap-based buffer underreads due to xmlParseName</issue> <issue id="981114" tracker="bnc">VUL-0: CVE-2016-1839: libxml2: Heap-based buffer overread in xmlDictAddString</issue> <issue id="981115" tracker="bnc">VUL-1: CVE-2016-1840: libxml2: heap-buffer-overflow in xmlFAParsePosCharGroup</issue> <issue id="963963" tracker="bnc">VUL-0: CVE-2016-2073: libxml2: out-of-bounds read in htmlParseNameComplex()</issue> <issue id="981040" tracker="bnc">VUL-0: CVE-2016-1762: libxml2: Heap-based buffer overread in xmlNextChar</issue> <issue id="981041" tracker="bnc">VUL-0: CVE-2016-1834: libxml2: heap-buffer-overflow in xmlStrncat</issue> <issue id="965283" tracker="bnc">VUL-1: CVE-2015-8806: libxml2: Heap-buffer overread in libxml2/dict.c on fuzzed html input</issue> <issue id="981109" tracker="bnc">VUL-0: CVE-2016-1835: libxml2: Heap use-after-free in xmlSAX2AttributeNs</issue> <issue id="981108" tracker="bnc">VUL-0: CVE-2016-1833: libxml2: Heap-based buffer overread in htmlCurrentChar</issue> <issue id="CVE-2016-2073" tracker="cve" /> <issue id="CVE-2016-4449" tracker="cve" /> <issue id="CVE-2016-1837" tracker="cve" /> <issue id="CVE-2016-4483" tracker="cve" /> <issue id="CVE-2016-3705" tracker="cve" /> <issue id="CVE-2016-4448" tracker="cve" /> <issue id="CVE-2016-4447" tracker="cve" /> <issue id="CVE-2016-1834" tracker="cve" /> <issue id="CVE-2016-1840" tracker="cve" /> <issue id="CVE-2016-1835" tracker="cve" /> <issue id="CVE-2016-1833" tracker="cve" /> <issue id="CVE-2016-1839" tracker="cve" /> <issue id="CVE-2016-1838" tracker="cve" /> <issue id="CVE-2015-8806" tracker="cve" /> <issue id="CVE-2016-1762" tracker="cve" /> <category>security</category> <rating>important</rating> <packager>simotek</packager> <description> This update for libxml2 fixes the following security issues: - CVE-2016-2073, CVE-2015-8806, CVE-2016-1839: A Heap-buffer overread was fixed in libxml2/dict.c [bsc#963963, bsc#965283, bsc#981114]. - CVE-2016-4483: Code was added to avoid an out of bound access when serializing malformed strings [bsc#978395]. - CVE-2016-1762: Fixed a heap-based buffer overread in xmlNextChar [bsc#981040]. - CVE-2016-1834: Fixed a heap-buffer-overflow in xmlStrncat [bsc#981041]. - CVE-2016-1833: Fixed a heap-based buffer overread in htmlCurrentChar [bsc#981108]. - CVE-2016-1835: Fixed a heap use-after-free in xmlSAX2AttributeNs [bsc#981109]. - CVE-2016-1837: Fixed a heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral [bsc#981111]. - CVE-2016-1838: Fixed a heap-based buffer overread in xmlParserPrintFileContextInternal [bsc#981112]. - CVE-2016-1840: Fixed a heap-buffer-overflow in xmlFAParsePosCharGroup [bsc#981115]. - CVE-2016-4447: Fixed a heap-based buffer-underreads due to xmlParseName [bsc#981548]. - CVE-2016-4448: Fixed some format string warnings with possible format string vulnerability [bsc#981549], - CVE-2016-4449: Fixed inappropriate fetch of entities content [bsc#981550]. - CVE-2016-3705: Fixed missing increment of recursion counter. </description> <summary>Security update for libxml2</summary> </patchinfo>
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor