SUSE-SU-2016:1604-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2016/suse-su-20161604-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2016:1604-1
Upstream
Related
Published
2016-06-17T09:21:30Z
Modified
2025-05-08T17:01:32.402777Z
Summary
Security update for libxml2
Details

This update for libxml2 fixes the following security issues:

  • CVE-2016-2073, CVE-2015-8806, CVE-2016-1839: A Heap-buffer overread was fixed in libxml2/dict.c [bsc#963963, bsc#965283, bsc#981114].
  • CVE-2016-4483: Code was added to avoid an out of bound access when serializing malformed strings [bsc#978395].
  • CVE-2016-1762: Fixed a heap-based buffer overread in xmlNextChar [bsc#981040].
  • CVE-2016-1834: Fixed a heap-buffer-overflow in xmlStrncat [bsc#981041].
  • CVE-2016-1833: Fixed a heap-based buffer overread in htmlCurrentChar [bsc#981108].
  • CVE-2016-1835: Fixed a heap use-after-free in xmlSAX2AttributeNs [bsc#981109].
  • CVE-2016-1837: Fixed a heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral [bsc#981111].
  • CVE-2016-1838: Fixed a heap-based buffer overread in xmlParserPrintFileContextInternal [bsc#981112].
  • CVE-2016-1840: Fixed a heap-buffer-overflow in xmlFAParsePosCharGroup [bsc#981115].
  • CVE-2016-4447: Fixed a heap-based buffer-underreads due to xmlParseName [bsc#981548].
  • CVE-2016-4448: Fixed some format string warnings with possible format string vulnerability [bsc#981549],
  • CVE-2016-4449: Fixed inappropriate fetch of entities content [bsc#981550].
  • CVE-2016-3705: Fixed missing increment of recursion counter.
References

Affected packages

SUSE:Linux Enterprise Server 11 SP2-LTSS

libxml2

Package

Name
libxml2
Purl
pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.6-0.44.1

Ecosystem specific 

{
    "binaries": [
        {
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json"

libxml2-python

Package

Name
libxml2-python
Purl
pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.6-0.44.4

Ecosystem specific 

{
    "binaries": [
        {
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json"

SUSE:Linux Enterprise Server 11 SP3-LTSS

libxml2

Package

Name
libxml2
Purl
pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.6-0.44.1

Ecosystem specific 

{
    "binaries": [
        {
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json"

libxml2-python

Package

Name
libxml2-python
Purl
pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.6-0.44.4

Ecosystem specific 

{
    "binaries": [
        {
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json"

SUSE:Linux Enterprise Server 11 SP3-TERADATA

libxml2

Package

Name
libxml2
Purl
pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.6-0.44.1

Ecosystem specific 

{
    "binaries": [
        {
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json"

libxml2-python

Package

Name
libxml2-python
Purl
pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.6-0.44.4

Ecosystem specific 

{
    "binaries": [
        {
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json"

SUSE:Linux Enterprise Server 11 SP4

libxml2

Package

Name
libxml2
Purl
pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.6-0.44.1

Ecosystem specific 

{
    "binaries": [
        {
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-x86": "2.7.6-0.44.1",
            "libxml2": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json"

libxml2-python

Package

Name
libxml2-python
Purl
pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.6-0.44.4

Ecosystem specific 

{
    "binaries": [
        {
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-x86": "2.7.6-0.44.1",
            "libxml2": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json"

SUSE:Linux Enterprise Server for SAP Applications 11 SP4

libxml2

Package

Name
libxml2
Purl
pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.6-0.44.1

Ecosystem specific 

{
    "binaries": [
        {
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-x86": "2.7.6-0.44.1",
            "libxml2": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json"

libxml2-python

Package

Name
libxml2-python
Purl
pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.6-0.44.4

Ecosystem specific 

{
    "binaries": [
        {
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2-x86": "2.7.6-0.44.1",
            "libxml2": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json"

SUSE:Linux Enterprise Software Development Kit 11 SP4

libxml2

Package

Name
libxml2
Purl
pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.6-0.44.1

Ecosystem specific 

{
    "binaries": [
        {
            "libxml2-devel-32bit": "2.7.6-0.44.1",
            "libxml2-devel": "2.7.6-0.44.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json"

SUSE:Manager 2.1

libxml2

Package

Name
libxml2
Purl
pkg:rpm/suse/libxml2&distro=SUSE%20Manager%202.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.6-0.44.1

Ecosystem specific 

{
    "binaries": [
        {
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json"

libxml2-python

Package

Name
libxml2-python
Purl
pkg:rpm/suse/libxml2-python&distro=SUSE%20Manager%202.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.6-0.44.4

Ecosystem specific 

{
    "binaries": [
        {
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json"

SUSE:Manager Proxy 2.1

libxml2

Package

Name
libxml2
Purl
pkg:rpm/suse/libxml2&distro=SUSE%20Manager%20Proxy%202.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.6-0.44.1

Ecosystem specific 

{
    "binaries": [
        {
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json"

libxml2-python

Package

Name
libxml2-python
Purl
pkg:rpm/suse/libxml2-python&distro=SUSE%20Manager%20Proxy%202.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.6-0.44.4

Ecosystem specific 

{
    "binaries": [
        {
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json"

SUSE:OpenStack Cloud 5

libxml2

Package

Name
libxml2
Purl
pkg:rpm/suse/libxml2&distro=SUSE%20OpenStack%20Cloud%205

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.6-0.44.1

Ecosystem specific 

{
    "binaries": [
        {
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json"

libxml2-python

Package

Name
libxml2-python
Purl
pkg:rpm/suse/libxml2-python&distro=SUSE%20OpenStack%20Cloud%205

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.6-0.44.4

Ecosystem specific 

{
    "binaries": [
        {
            "libxml2-doc": "2.7.6-0.44.1",
            "libxml2-32bit": "2.7.6-0.44.1",
            "libxml2": "2.7.6-0.44.1",
            "libxml2-python": "2.7.6-0.44.4"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1604-1.json"