SUSE-SU-2017:2375-1
Security update for expat
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for expat fixes the following issues: - CVE-2016-9063: Possible integer overflow to fix inside XML_Parse leading to unexpected behaviour (bsc#1047240) - CVE-2017-9233: External Entity Vulnerability could lead to denial of service (bsc#1047236)
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 11.4 | expat, libexpat-devel, libexpat1 ve 2 tane daha | 2.0.1-88.42.3.2 |
1 kaynaktaki 5 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 11.4 | expat | 2.0.1-88.42.3.2 |
| SUSE Linux Enterprise 11.4 | libexpat-devel | 2.0.1-88.42.3.2 |
| SUSE Linux Enterprise 11.4 | libexpat1 | 2.0.1-88.42.3.2 |
| SUSE Linux Enterprise 11.4 | libexpat1-32bit | 2.0.1-88.42.3.2 |
| SUSE Linux Enterprise 11.4 | libexpat1-x86 | 2.0.1-88.42.3.2 |
Referanslar
- https://bugzilla.suse.com/1047236
- https://bugzilla.suse.com/1047240
- https://lists.suse.com/pipermail/sle-security-updates/2017-September/003189.html
- https://www.suse.com/security/cve/CVE-2016-9063/
- https://www.suse.com/security/cve/CVE-2017-9233/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2017/suse-su-20172375-1/