Recommended update for mojo-parent SUSE Patch security@suse.de SUSE Security Team SUSE-RU-2024:3971-1 Final 1 1 2024-11-11T09:29:10Z current 2024-11-11T09:29:10Z 2024-11-11T09:29:10Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Recommended update for mojo-parent This update for mojo-parent fixes the following issues: xalan-j2 was updated from version 2.7.2 to 2.7.3: - Security issues fixed: * CVE-2022-34169: Fixed integer truncation issue when processing malicious XSLT stylesheets (bsc#1201684) - Changes and Bugs fixed: * Java 8 is now the minimum requirement * Upgraded to Apache Commons BCEL 6.7.0 * Upgraded to Xerces-J 2.12.2 mojo-parent was updated from version 70 to 82: - Main changes: * Potentially Breaking Changes: + mojo.java.target should be set as '8', without '1.' + spotless plugin must be executed by JDK 11 at least + ossrh-snapshots repository was removed from parent * New features and improvements: + Removed SHA-512 checksum for source release artifact + Use only project version as tag for release + Added space before close empty elements in poms by spotless + Using Checkstyle together with Spotless + Introduce spotless for automatic code formatting + Introduce enforcer rule for minimal version of Java and Maven + Use new Plugin Tools report - maven-plugin-report-plugin + Added sisu-maven-plugin + Introduced maven.version property + Execute spotless by JDK 11 at least + Use release options for m-compiler-p with newer JDKs + Allow override of invoker.streamLogsOnFailures + Require Maven 3.9.x at least for releases + Added maven-wrapper-plugin to pluginManagement + Removed ossrh-snapshots repository from MojoHaus parent + Added build-helper-maven-plugin to pluginManagement + Require Maven 3.6.3+ + Updated palantirJavaFormat for spotless - JDK 21 compatible + Added dependencyManagement for maven-shade-plugin + Dropped recommendedJavaBuildVersion property + Format Markdown files with Spotless Plugin * Bugs fixed: + Restore source release distribution in child projects + Rename property maven.version to mavenVersion + minimalMavenBuildVersion should not be overriding by mavenVersion + Use simple checkstyle rules since spotless is executed by default + Use old spotless version only for JDK < 11 + Fixed spotless configuration for markdown - Other changes: * Removed Google search box due to privacy * Put version for mrm-maven-plugin in property * Added streamLogsOnFailures to m-invoker-p * Added property for maven-fluido-skin version * Setup Apache Matomo analytics * Require Maven 3.2.5 * Added SHA-512 hashes * Extract plugin version as variable so child pom can override if needed * Removed issue-tracking as no longer exists * Removed cim report as no longer exists bcel was updated from version 5.2 to 6.10: - Many APIs have been extended - Added riscv64 support - Various bugs were fixed apache-commons-lang3 was updated to version 3.12.0 to 3.16.0: - Included new APIs that are needed by bcel 6.x - Various minor bugs were fixed xerces-j2: - Improved RPM packaging build instructions netty3: - Generate sources with protobuf instead of using pre-generated ones The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/kiwi:latest-2024-3971,Container containers/apache-pulsar:3.3-2024-3971,Container suse/manager/5.0/x86_64/server:latest-2024-3971,Container suse/multi-linux-manager/5.1/x86_64/server:latest-2024-3971,Image SLES15-SP4-Manager-Server-4-3-2024-3971,Image SLES15-SP4-Manager-Server-4-3-Azure-llc-2024-3971,Image SLES15-SP4-Manager-Server-4-3-Azure-ltd-2024-3971,Image SLES15-SP4-Manager-Server-4-3-BYOS-2024-3971,Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure-2024-3971,Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2-2024-3971,Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE-2024-3971,Image server-image-2024-3971,SUSE-2024-3971,SUSE-SLE-Module-Basesystem-15-SP5-2024-3971,SUSE-SLE-Module-Basesystem-15-SP6-2024-3971,SUSE-SLE-Module-Development-Tools-15-SP5-2024-3971,SUSE-SLE-Module-Development-Tools-15-SP6-2024-3971,SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-3971,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-3971,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3971,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3971,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3971,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3971,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3971,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3971,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3971,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3971,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3971,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3971,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3971,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3971,SUSE-Storage-7.1-2024-3971,openSUSE-SLE-15.5-2024-3971,openSUSE-SLE-15.6-2024-3971 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/-2024-3971/suse-ru-20243971-1/ Link for SUSE-RU-2024:3971-1 https://lists.suse.com/pipermail/sle-updates/2024-November/037527.html E-Mail link for SUSE-RU-2024:3971-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2022-34169/ SUSE CVE CVE-2022-34169 page Container bci/kiwi:latest Container containers/apache-pulsar:3.3 Container suse/manager/5.0/x86_64/server:latest Container suse/multi-linux-manager/5.1/x86_64/server:latest Image SLES15-SP4-Manager-Server-4-3 Image SLES15-SP4-Manager-Server-4-3-Azure-llc Image SLES15-SP4-Manager-Server-4-3-Azure-ltd Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE Image server-image SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Manager Proxy 4.3 SUSE Manager Server 4.3 SUSE Manager Server Module 4.3 openSUSE Leap 15.5 openSUSE Leap 15.6 xalan-j2-2.7.3-150200.11.7.1 xerces-j2-2.12.2-150200.3.10.2 apache-commons-lang3-3.16.0-150200.3.9.2 bcel-6.10.0-150200.11.6.2 apache-commons-lang3-javadoc-3.16.0-150200.3.9.2 bcel-javadoc-6.10.0-150200.11.6.2 mojo-parent-82-150200.3.10.1 netty3-3.10.6-150200.3.13.2 netty3-javadoc-3.10.6-150200.3.13.2 xalan-j2-demo-2.7.3-150200.11.7.1 xalan-j2-manual-2.7.3-150200.11.7.1 xalan-j2-xsltc-2.7.3-150200.11.7.1 xerces-j2-demo-2.12.2-150200.3.10.2 xerces-j2-javadoc-2.12.2-150200.3.10.2 xml-stylebook-1.0~b3_xalan2-150200.5.3.2 xml-stylebook-demo-1.0~b3_xalan2-150200.5.3.2 xml-stylebook-javadoc-1.0~b3_xalan2-150200.5.3.2 xalan-j2-2.7.3-150200.11.7.1 as a component of Container bci/kiwi:latest xerces-j2-2.12.2-150200.3.10.2 as a component of Container bci/kiwi:latest apache-commons-lang3-3.16.0-150200.3.9.2 as a component of Container containers/apache-pulsar:3.3 apache-commons-lang3-3.16.0-150200.3.9.2 as a component of Container suse/manager/5.0/x86_64/server:latest bcel-6.10.0-150200.11.6.2 as a component of Container suse/manager/5.0/x86_64/server:latest xalan-j2-2.7.3-150200.11.7.1 as a component of Container suse/manager/5.0/x86_64/server:latest xerces-j2-2.12.2-150200.3.10.2 as a component of Container suse/manager/5.0/x86_64/server:latest apache-commons-lang3-3.16.0-150200.3.9.2 as a component of Container suse/multi-linux-manager/5.1/x86_64/server:latest bcel-6.10.0-150200.11.6.2 as a component of Container suse/multi-linux-manager/5.1/x86_64/server:latest xalan-j2-2.7.3-150200.11.7.1 as a component of Container suse/multi-linux-manager/5.1/x86_64/server:latest xerces-j2-2.12.2-150200.3.10.2 as a component of Container suse/multi-linux-manager/5.1/x86_64/server:latest apache-commons-lang3-3.16.0-150200.3.9.2 as a component of Image SLES15-SP4-Manager-Server-4-3 bcel-6.10.0-150200.11.6.2 as a component of Image SLES15-SP4-Manager-Server-4-3 xalan-j2-2.7.3-150200.11.7.1 as a component of Image SLES15-SP4-Manager-Server-4-3 xerces-j2-2.12.2-150200.3.10.2 as a component of Image SLES15-SP4-Manager-Server-4-3 apache-commons-lang3-3.16.0-150200.3.9.2 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-llc bcel-6.10.0-150200.11.6.2 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-llc xalan-j2-2.7.3-150200.11.7.1 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-llc xerces-j2-2.12.2-150200.3.10.2 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-llc apache-commons-lang3-3.16.0-150200.3.9.2 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-ltd bcel-6.10.0-150200.11.6.2 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-ltd xalan-j2-2.7.3-150200.11.7.1 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-ltd xerces-j2-2.12.2-150200.3.10.2 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-ltd apache-commons-lang3-3.16.0-150200.3.9.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS bcel-6.10.0-150200.11.6.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS xalan-j2-2.7.3-150200.11.7.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS xerces-j2-2.12.2-150200.3.10.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS apache-commons-lang3-3.16.0-150200.3.9.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure bcel-6.10.0-150200.11.6.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure xalan-j2-2.7.3-150200.11.7.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure xerces-j2-2.12.2-150200.3.10.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure apache-commons-lang3-3.16.0-150200.3.9.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 bcel-6.10.0-150200.11.6.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 xalan-j2-2.7.3-150200.11.7.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 xerces-j2-2.12.2-150200.3.10.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 apache-commons-lang3-3.16.0-150200.3.9.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE bcel-6.10.0-150200.11.6.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE xalan-j2-2.7.3-150200.11.7.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE xerces-j2-2.12.2-150200.3.10.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE apache-commons-lang3-3.16.0-150200.3.9.2 as a component of Image server-image bcel-6.10.0-150200.11.6.2 as a component of Image server-image xalan-j2-2.7.3-150200.11.7.1 as a component of Image server-image xerces-j2-2.12.2-150200.3.10.2 as a component of Image server-image apache-commons-lang3-3.16.0-150200.3.9.2 as a component of SUSE Enterprise Storage 7.1 bcel-6.10.0-150200.11.6.2 as a component of SUSE Enterprise Storage 7.1 netty3-3.10.6-150200.3.13.2 as a component of SUSE Enterprise Storage 7.1 xalan-j2-2.7.3-150200.11.7.1 as a component of SUSE Enterprise Storage 7.1 xerces-j2-2.12.2-150200.3.10.2 as a component of SUSE Enterprise Storage 7.1 apache-commons-lang3-3.16.0-150200.3.9.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS bcel-6.10.0-150200.11.6.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS netty3-3.10.6-150200.3.13.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xalan-j2-2.7.3-150200.11.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xerces-j2-2.12.2-150200.3.10.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS apache-commons-lang3-3.16.0-150200.3.9.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS bcel-6.10.0-150200.11.6.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS netty3-3.10.6-150200.3.13.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS xalan-j2-2.7.3-150200.11.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS xerces-j2-2.12.2-150200.3.10.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS apache-commons-lang3-3.16.0-150200.3.9.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS bcel-6.10.0-150200.11.6.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS netty3-3.10.6-150200.3.13.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS xalan-j2-2.7.3-150200.11.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS xerces-j2-2.12.2-150200.3.10.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS apache-commons-lang3-3.16.0-150200.3.9.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS bcel-6.10.0-150200.11.6.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS netty3-3.10.6-150200.3.13.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS xalan-j2-2.7.3-150200.11.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS xerces-j2-2.12.2-150200.3.10.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS bcel-6.10.0-150200.11.6.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 xalan-j2-2.7.3-150200.11.7.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 xerces-j2-2.12.2-150200.3.10.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 apache-commons-lang3-3.16.0-150200.3.9.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 bcel-6.10.0-150200.11.6.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 xalan-j2-2.7.3-150200.11.7.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 xerces-j2-2.12.2-150200.3.10.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 apache-commons-lang3-3.16.0-150200.3.9.2 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 netty3-3.10.6-150200.3.13.2 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 netty3-3.10.6-150200.3.13.2 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 apache-commons-lang3-3.16.0-150200.3.9.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS bcel-6.10.0-150200.11.6.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS netty3-3.10.6-150200.3.13.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xalan-j2-2.7.3-150200.11.7.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xerces-j2-2.12.2-150200.3.10.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS apache-commons-lang3-3.16.0-150200.3.9.2 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS bcel-6.10.0-150200.11.6.2 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS netty3-3.10.6-150200.3.13.2 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS xalan-j2-2.7.3-150200.11.7.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS xerces-j2-2.12.2-150200.3.10.2 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS apache-commons-lang3-3.16.0-150200.3.9.2 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS bcel-6.10.0-150200.11.6.2 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS netty3-3.10.6-150200.3.13.2 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS xalan-j2-2.7.3-150200.11.7.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS xerces-j2-2.12.2-150200.3.10.2 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS apache-commons-lang3-3.16.0-150200.3.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 bcel-6.10.0-150200.11.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 netty3-3.10.6-150200.3.13.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xalan-j2-2.7.3-150200.11.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xerces-j2-2.12.2-150200.3.10.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 apache-commons-lang3-3.16.0-150200.3.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 bcel-6.10.0-150200.11.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 netty3-3.10.6-150200.3.13.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 xalan-j2-2.7.3-150200.11.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 xerces-j2-2.12.2-150200.3.10.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 apache-commons-lang3-3.16.0-150200.3.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 bcel-6.10.0-150200.11.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 netty3-3.10.6-150200.3.13.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 xalan-j2-2.7.3-150200.11.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 xerces-j2-2.12.2-150200.3.10.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 bcel-6.10.0-150200.11.6.2 as a component of SUSE Manager Proxy 4.3 xalan-j2-2.7.3-150200.11.7.1 as a component of SUSE Manager Proxy 4.3 xerces-j2-2.12.2-150200.3.10.2 as a component of SUSE Manager Proxy 4.3 bcel-6.10.0-150200.11.6.2 as a component of SUSE Manager Server 4.3 xalan-j2-2.7.3-150200.11.7.1 as a component of SUSE Manager Server 4.3 xerces-j2-2.12.2-150200.3.10.2 as a component of SUSE Manager Server 4.3 apache-commons-lang3-3.16.0-150200.3.9.2 as a component of SUSE Manager Server Module 4.3 apache-commons-lang3-3.16.0-150200.3.9.2 as a component of openSUSE Leap 15.5 apache-commons-lang3-javadoc-3.16.0-150200.3.9.2 as a component of openSUSE Leap 15.5 bcel-6.10.0-150200.11.6.2 as a component of openSUSE Leap 15.5 mojo-parent-82-150200.3.10.1 as a component of openSUSE Leap 15.5 netty3-3.10.6-150200.3.13.2 as a component of openSUSE Leap 15.5 netty3-javadoc-3.10.6-150200.3.13.2 as a component of openSUSE Leap 15.5 xalan-j2-2.7.3-150200.11.7.1 as a component of openSUSE Leap 15.5 xalan-j2-demo-2.7.3-150200.11.7.1 as a component of openSUSE Leap 15.5 xalan-j2-manual-2.7.3-150200.11.7.1 as a component of openSUSE Leap 15.5 xalan-j2-xsltc-2.7.3-150200.11.7.1 as a component of openSUSE Leap 15.5 xerces-j2-2.12.2-150200.3.10.2 as a component of openSUSE Leap 15.5 xerces-j2-demo-2.12.2-150200.3.10.2 as a component of openSUSE Leap 15.5 xerces-j2-javadoc-2.12.2-150200.3.10.2 as a component of openSUSE Leap 15.5 apache-commons-lang3-3.16.0-150200.3.9.2 as a component of openSUSE Leap 15.6 apache-commons-lang3-javadoc-3.16.0-150200.3.9.2 as a component of openSUSE Leap 15.6 bcel-6.10.0-150200.11.6.2 as a component of openSUSE Leap 15.6 mojo-parent-82-150200.3.10.1 as a component of openSUSE Leap 15.6 netty3-3.10.6-150200.3.13.2 as a component of openSUSE Leap 15.6 netty3-javadoc-3.10.6-150200.3.13.2 as a component of openSUSE Leap 15.6 xalan-j2-2.7.3-150200.11.7.1 as a component of openSUSE Leap 15.6 xalan-j2-demo-2.7.3-150200.11.7.1 as a component of openSUSE Leap 15.6 xalan-j2-manual-2.7.3-150200.11.7.1 as a component of openSUSE Leap 15.6 xalan-j2-xsltc-2.7.3-150200.11.7.1 as a component of openSUSE Leap 15.6 xerces-j2-2.12.2-150200.3.10.2 as a component of openSUSE Leap 15.6 xerces-j2-demo-2.12.2-150200.3.10.2 as a component of openSUSE Leap 15.6 xerces-j2-javadoc-2.12.2-150200.3.10.2 as a component of openSUSE Leap 15.6 The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 or later. Note: Java runtimes (such as OpenJDK) include repackaged copies of Xalan. CVE-2022-34169 Container bci/kiwi:latest:xalan-j2-2.7.3-150200.11.7.1 Container bci/kiwi:latest:xerces-j2-2.12.2-150200.3.10.2 Container containers/apache-pulsar:3.3:apache-commons-lang3-3.16.0-150200.3.9.2 Container suse/manager/5.0/x86_64/server:latest:apache-commons-lang3-3.16.0-150200.3.9.2 Container suse/manager/5.0/x86_64/server:latest:bcel-6.10.0-150200.11.6.2 Container suse/manager/5.0/x86_64/server:latest:xalan-j2-2.7.3-150200.11.7.1 Container suse/manager/5.0/x86_64/server:latest:xerces-j2-2.12.2-150200.3.10.2 Container suse/multi-linux-manager/5.1/x86_64/server:latest:apache-commons-lang3-3.16.0-150200.3.9.2 Container suse/multi-linux-manager/5.1/x86_64/server:latest:bcel-6.10.0-150200.11.6.2 Container suse/multi-linux-manager/5.1/x86_64/server:latest:xalan-j2-2.7.3-150200.11.7.1 Container suse/multi-linux-manager/5.1/x86_64/server:latest:xerces-j2-2.12.2-150200.3.10.2 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:apache-commons-lang3-3.16.0-150200.3.9.2 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:bcel-6.10.0-150200.11.6.2 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:xalan-j2-2.7.3-150200.11.7.1 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:xerces-j2-2.12.2-150200.3.10.2 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:apache-commons-lang3-3.16.0-150200.3.9.2 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:bcel-6.10.0-150200.11.6.2 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:xalan-j2-2.7.3-150200.11.7.1 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:xerces-j2-2.12.2-150200.3.10.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:apache-commons-lang3-3.16.0-150200.3.9.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:bcel-6.10.0-150200.11.6.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:xalan-j2-2.7.3-150200.11.7.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:xerces-j2-2.12.2-150200.3.10.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:apache-commons-lang3-3.16.0-150200.3.9.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:bcel-6.10.0-150200.11.6.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:xalan-j2-2.7.3-150200.11.7.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:xerces-j2-2.12.2-150200.3.10.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:apache-commons-lang3-3.16.0-150200.3.9.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:bcel-6.10.0-150200.11.6.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:xalan-j2-2.7.3-150200.11.7.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:xerces-j2-2.12.2-150200.3.10.2 Image SLES15-SP4-Manager-Server-4-3-BYOS:apache-commons-lang3-3.16.0-150200.3.9.2 Image SLES15-SP4-Manager-Server-4-3-BYOS:bcel-6.10.0-150200.11.6.2 Image SLES15-SP4-Manager-Server-4-3-BYOS:xalan-j2-2.7.3-150200.11.7.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:xerces-j2-2.12.2-150200.3.10.2 Image SLES15-SP4-Manager-Server-4-3:apache-commons-lang3-3.16.0-150200.3.9.2 Image SLES15-SP4-Manager-Server-4-3:bcel-6.10.0-150200.11.6.2 Image SLES15-SP4-Manager-Server-4-3:xalan-j2-2.7.3-150200.11.7.1 Image SLES15-SP4-Manager-Server-4-3:xerces-j2-2.12.2-150200.3.10.2 Image server-image:apache-commons-lang3-3.16.0-150200.3.9.2 Image server-image:bcel-6.10.0-150200.11.6.2 Image server-image:xalan-j2-2.7.3-150200.11.7.1 Image server-image:xerces-j2-2.12.2-150200.3.10.2 SUSE Enterprise Storage 7.1:apache-commons-lang3-3.16.0-150200.3.9.2 SUSE Enterprise Storage 7.1:bcel-6.10.0-150200.11.6.2 SUSE Enterprise Storage 7.1:netty3-3.10.6-150200.3.13.2 SUSE Enterprise Storage 7.1:xalan-j2-2.7.3-150200.11.7.1 SUSE Enterprise Storage 7.1:xerces-j2-2.12.2-150200.3.10.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache-commons-lang3-3.16.0-150200.3.9.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bcel-6.10.0-150200.11.6.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:netty3-3.10.6-150200.3.13.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:xalan-j2-2.7.3-150200.11.7.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:xerces-j2-2.12.2-150200.3.10.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache-commons-lang3-3.16.0-150200.3.9.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bcel-6.10.0-150200.11.6.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:netty3-3.10.6-150200.3.13.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xalan-j2-2.7.3-150200.11.7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xerces-j2-2.12.2-150200.3.10.2 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache-commons-lang3-3.16.0-150200.3.9.2 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bcel-6.10.0-150200.11.6.2 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:netty3-3.10.6-150200.3.13.2 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xalan-j2-2.7.3-150200.11.7.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xerces-j2-2.12.2-150200.3.10.2 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache-commons-lang3-3.16.0-150200.3.9.2 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bcel-6.10.0-150200.11.6.2 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:netty3-3.10.6-150200.3.13.2 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xalan-j2-2.7.3-150200.11.7.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xerces-j2-2.12.2-150200.3.10.2 SUSE Linux Enterprise Module for Basesystem 15 SP5:bcel-6.10.0-150200.11.6.2 SUSE Linux Enterprise Module for Basesystem 15 SP5:xalan-j2-2.7.3-150200.11.7.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:xerces-j2-2.12.2-150200.3.10.2 SUSE Linux Enterprise Module for Basesystem 15 SP6:apache-commons-lang3-3.16.0-150200.3.9.2 SUSE Linux Enterprise Module for Basesystem 15 SP6:bcel-6.10.0-150200.11.6.2 SUSE Linux Enterprise Module for Basesystem 15 SP6:xalan-j2-2.7.3-150200.11.7.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:xerces-j2-2.12.2-150200.3.10.2 SUSE Linux Enterprise Module for Development Tools 15 SP5:apache-commons-lang3-3.16.0-150200.3.9.2 SUSE Linux Enterprise Module for Development Tools 15 SP5:netty3-3.10.6-150200.3.13.2 SUSE Linux Enterprise Module for Development Tools 15 SP6:netty3-3.10.6-150200.3.13.2 SUSE Linux Enterprise Server 15 SP2-LTSS:apache-commons-lang3-3.16.0-150200.3.9.2 SUSE Linux Enterprise Server 15 SP2-LTSS:bcel-6.10.0-150200.11.6.2 SUSE Linux Enterprise Server 15 SP2-LTSS:netty3-3.10.6-150200.3.13.2 SUSE Linux Enterprise Server 15 SP2-LTSS:xalan-j2-2.7.3-150200.11.7.1 SUSE Linux Enterprise Server 15 SP2-LTSS:xerces-j2-2.12.2-150200.3.10.2 SUSE Linux Enterprise Server 15 SP3-LTSS:apache-commons-lang3-3.16.0-150200.3.9.2 SUSE Linux Enterprise Server 15 SP3-LTSS:bcel-6.10.0-150200.11.6.2 SUSE Linux Enterprise Server 15 SP3-LTSS:netty3-3.10.6-150200.3.13.2 SUSE Linux Enterprise Server 15 SP3-LTSS:xalan-j2-2.7.3-150200.11.7.1 SUSE Linux Enterprise Server 15 SP3-LTSS:xerces-j2-2.12.2-150200.3.10.2 SUSE Linux Enterprise Server 15 SP4-LTSS:apache-commons-lang3-3.16.0-150200.3.9.2 SUSE Linux Enterprise Server 15 SP4-LTSS:bcel-6.10.0-150200.11.6.2 SUSE Linux Enterprise Server 15 SP4-LTSS:netty3-3.10.6-150200.3.13.2 SUSE Linux Enterprise Server 15 SP4-LTSS:xalan-j2-2.7.3-150200.11.7.1 SUSE Linux Enterprise Server 15 SP4-LTSS:xerces-j2-2.12.2-150200.3.10.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache-commons-lang3-3.16.0-150200.3.9.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:bcel-6.10.0-150200.11.6.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:netty3-3.10.6-150200.3.13.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:xalan-j2-2.7.3-150200.11.7.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:xerces-j2-2.12.2-150200.3.10.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache-commons-lang3-3.16.0-150200.3.9.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:bcel-6.10.0-150200.11.6.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:netty3-3.10.6-150200.3.13.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:xalan-j2-2.7.3-150200.11.7.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:xerces-j2-2.12.2-150200.3.10.2 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache-commons-lang3-3.16.0-150200.3.9.2 SUSE Linux Enterprise Server for SAP Applications 15 SP4:bcel-6.10.0-150200.11.6.2 SUSE Linux Enterprise Server for SAP Applications 15 SP4:netty3-3.10.6-150200.3.13.2 SUSE Linux Enterprise Server for SAP Applications 15 SP4:xalan-j2-2.7.3-150200.11.7.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:xerces-j2-2.12.2-150200.3.10.2 SUSE Manager Proxy 4.3:bcel-6.10.0-150200.11.6.2 SUSE Manager Proxy 4.3:xalan-j2-2.7.3-150200.11.7.1 SUSE Manager Proxy 4.3:xerces-j2-2.12.2-150200.3.10.2 SUSE Manager Server 4.3:bcel-6.10.0-150200.11.6.2 SUSE Manager Server 4.3:xalan-j2-2.7.3-150200.11.7.1 SUSE Manager Server 4.3:xerces-j2-2.12.2-150200.3.10.2 SUSE Manager Server Module 4.3:apache-commons-lang3-3.16.0-150200.3.9.2 openSUSE Leap 15.5:apache-commons-lang3-3.16.0-150200.3.9.2 openSUSE Leap 15.5:apache-commons-lang3-javadoc-3.16.0-150200.3.9.2 openSUSE Leap 15.5:bcel-6.10.0-150200.11.6.2 openSUSE Leap 15.5:mojo-parent-82-150200.3.10.1 openSUSE Leap 15.5:netty3-3.10.6-150200.3.13.2 openSUSE Leap 15.5:netty3-javadoc-3.10.6-150200.3.13.2 openSUSE Leap 15.5:xalan-j2-2.7.3-150200.11.7.1 openSUSE Leap 15.5:xalan-j2-demo-2.7.3-150200.11.7.1 openSUSE Leap 15.5:xalan-j2-manual-2.7.3-150200.11.7.1 openSUSE Leap 15.5:xalan-j2-xsltc-2.7.3-150200.11.7.1 openSUSE Leap 15.5:xerces-j2-2.12.2-150200.3.10.2 openSUSE Leap 15.5:xerces-j2-demo-2.12.2-150200.3.10.2 openSUSE Leap 15.5:xerces-j2-javadoc-2.12.2-150200.3.10.2 openSUSE Leap 15.6:apache-commons-lang3-3.16.0-150200.3.9.2 openSUSE Leap 15.6:apache-commons-lang3-javadoc-3.16.0-150200.3.9.2 openSUSE Leap 15.6:bcel-6.10.0-150200.11.6.2 openSUSE Leap 15.6:mojo-parent-82-150200.3.10.1 openSUSE Leap 15.6:netty3-3.10.6-150200.3.13.2 openSUSE Leap 15.6:netty3-javadoc-3.10.6-150200.3.13.2 openSUSE Leap 15.6:xalan-j2-2.7.3-150200.11.7.1 openSUSE Leap 15.6:xalan-j2-demo-2.7.3-150200.11.7.1 openSUSE Leap 15.6:xalan-j2-manual-2.7.3-150200.11.7.1 openSUSE Leap 15.6:xalan-j2-xsltc-2.7.3-150200.11.7.1 openSUSE Leap 15.6:xerces-j2-2.12.2-150200.3.10.2 openSUSE Leap 15.6:xerces-j2-demo-2.12.2-150200.3.10.2 openSUSE Leap 15.6:xerces-j2-javadoc-2.12.2-150200.3.10.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/-2024-3971/suse-ru-20243971-1/ https://www.suse.com/security/cve/CVE-2022-34169.html CVE-2022-34169 https://bugzilla.suse.com/1201684 SUSE Bug 1201684 https://bugzilla.suse.com/1202427 SUSE Bug 1202427 https://bugzilla.suse.com/1207688 SUSE Bug 1207688