Security update for libxml2 SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2016:1298-1 Final 1 1 2016-05-13T08:23:23Z current 2016-05-13T08:23:23Z 2016-05-13T08:23:23Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libxml2 This update for libxml2 fixes two security issues: - libxml2 limits the number of recursions an XML document can contain so to protect against the 'Billion Laughs' denial-of-service attack. Unfortunately, the underlying counter was not incremented properly in all necessary locations. Therefore, specially crafted XML documents could exhaust all available stack space and crash the XML parser without running into the recursion limit. This vulnerability has been fixed. (bsc#975947) - When running in recovery mode, certain invalid XML documents would trigger an infinite recursion in libxml2 that ran until all stack space was exhausted. This vulnerability could have been used to facilitate a denial-of-sevice attack. (CVE-2016-3627, bsc#972335) This update was imported from the SUSE:SLE-12:Update update project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html E-Mail link for openSUSE-SU-2016:1298-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.1 libxml2-2.9.1-16.1 libxml2-2-2.9.1-16.1 libxml2-2-32bit-2.9.1-16.1 libxml2-devel-2.9.1-16.1 libxml2-devel-32bit-2.9.1-16.1 libxml2-doc-2.9.1-16.1 libxml2-tools-2.9.1-16.1 python-libxml2-2.9.1-16.1 libxml2-2.9.1-16.1 as a component of openSUSE Leap 42.1 libxml2-2-2.9.1-16.1 as a component of openSUSE Leap 42.1 libxml2-2-32bit-2.9.1-16.1 as a component of openSUSE Leap 42.1 libxml2-devel-2.9.1-16.1 as a component of openSUSE Leap 42.1 libxml2-devel-32bit-2.9.1-16.1 as a component of openSUSE Leap 42.1 libxml2-doc-2.9.1-16.1 as a component of openSUSE Leap 42.1 libxml2-tools-2.9.1-16.1 as a component of openSUSE Leap 42.1 python-libxml2-2.9.1-16.1 as a component of openSUSE Leap 42.1 The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document. CVE-2016-3627 openSUSE Leap 42.1:libxml2-2-2.9.1-16.1 openSUSE Leap 42.1:libxml2-2-32bit-2.9.1-16.1 openSUSE Leap 42.1:libxml2-2.9.1-16.1 openSUSE Leap 42.1:libxml2-devel-2.9.1-16.1 openSUSE Leap 42.1:libxml2-devel-32bit-2.9.1-16.1 openSUSE Leap 42.1:libxml2-doc-2.9.1-16.1 openSUSE Leap 42.1:libxml2-tools-2.9.1-16.1 openSUSE Leap 42.1:python-libxml2-2.9.1-16.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Please Install the update. https://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html https://www.suse.com/security/cve/CVE-2016-3627.html CVE-2016-3627 https://bugzilla.suse.com/1026099 SUSE Bug 1026099 https://bugzilla.suse.com/1026101 SUSE Bug 1026101 https://bugzilla.suse.com/1123919 SUSE Bug 1123919 https://bugzilla.suse.com/972335 SUSE Bug 972335 https://bugzilla.suse.com/975947 SUSE Bug 975947