SUSE-SU-2017:1454-1

Advisory lineage Upstream: 5 Downstream: 0
Published: 30 May 2017, 20:28
Last modified:04 Feb 2026, 02:44

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

30 May 2017, 20:28
Published
Vulnerability first disclosed
04 Feb 2026, 02:44
Last Modified
Vulnerability information updated

Description

Security update for libxml2 This update for libxml2 fixes the following issues: - CVE-2017-9047, CVE-2017-9048: The function xmlSnprintfElementContent in valid.c was vulnerable to a stack buffer overflow (bsc#1039063, bsc#1039064) - CVE-2017-9049: The function xmlDictComputeFastKey in dict.c was vulnerable to a heap-based buffer over-read. (bsc#1039066) - CVE-2017-9050: The function xmlDictAddString was vulnerable to a heap-based buffer over-read (bsc#1039661) - CVE-2016-1839: heap-based buffer overflow (xmlDictAddString func) (bnc#1039069)

Affected Systems

  • suse•libxml2&distro=SUSE Linux Enterprise Desktop 12 SP2

    < 2.9.4-36.1

  • suse•libxml2&distro=SUSE Linux Enterprise Server 12 SP2

    < 2.9.4-36.1

  • suse•libxml2&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2

    < 2.9.4-36.1

  • suse•libxml2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2

    < 2.9.4-36.1

  • suse•libxml2&distro=SUSE Linux Enterprise Software Development Kit 12 SP2

    < 2.9.4-36.1

  • suse•python-libxml2&distro=SUSE Linux Enterprise Desktop 12 SP2

    < 2.9.4-36.1

  • suse•python-libxml2&distro=SUSE Linux Enterprise Server 12 SP2

    < 2.9.4-36.1

  • suse•python-libxml2&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2

    < 2.9.4-36.1

  • suse•python-libxml2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2

    < 2.9.4-36.1

References (12)