SUSE-CU-2021:172-1: Security update of suse/sles12sp4
sle-security-updates at lists.suse.com
sle-security-updates at lists.suse.com
Fri May 21 06:21:08 UTC 2021
SUSE Container Update Advisory: suse/sles12sp4
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2021:172-1
Container Tags : suse/sles12sp4:26.294 , suse/sles12sp4:latest
Container Release : 26.294
Severity : important
Type : security
References : 1179515 1184362 1185408 1185409 1185410 1185698 CVE-2021-3516
CVE-2021-3517 CVE-2021-3518 CVE-2021-3537
-----------------------------------------------------------------
The container suse/sles12sp4 was updated. The following patches have been included in this update:
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2021:1658-1
Released: Wed May 19 18:20:42 2021
Summary: Security update for libxml2
Type: security
Severity: important
References: 1185408,1185409,1185410,1185698,CVE-2021-3516,CVE-2021-3517,CVE-2021-3518,CVE-2021-3537
This update for libxml2 fixes the following issues:
Security issues fixed:
CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel (bsc#1185698)
- CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess (bsc#1185408).
- CVE-2021-3517: Fixed a heap based buffer overflow in entities.c:xmlEncodeEntitiesInternal (bsc#1185410).
- CVE-2021-3516: Fixed a use after free in entities.c:xmlEncodeEntitiesInternal (bsc#1185409).
-----------------------------------------------------------------
Advisory ID: SUSE-RU-2021:1667-1
Released: Thu May 20 09:34:34 2021
Summary: Recommended update for audit
Type: recommended
Severity: moderate
References: 1179515,1184362
This update for audit fixes the following issues:
- Enable Aarch64 processor support. (bsc#1179515, bsc#1184362)
More information about the sle-security-updates
mailing list