Security update for libxml2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:2267-1 Final 1 1 2024-07-02T08:33:49Z current 2024-07-02T08:33:49Z 2024-07-02T08:33:49Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libxml2 This update for libxml2 fixes the following issues: - CVE-2024-34459: Fixed buffer over-read in xmlHTMLPrintFileContext in xmllint.c (bsc#1224282). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/ltss/sle15.3/bci-base:latest-2024-2267,Container suse/sle-micro-rancher/5.2:latest-2024-2267,Container suse/sle-micro/5.1/toolbox:latest-2024-2267,Container suse/sle-micro/5.2/toolbox:latest-2024-2267,Container suse/sle15:15.2-2024-2267,Image SLES15-SP3-BYOS-Azure-2024-2267,Image SLES15-SP3-BYOS-EC2-HVM-2024-2267,Image SLES15-SP3-BYOS-GCE-2024-2267,Image SLES15-SP3-CHOST-BYOS-Aliyun-2024-2267,Image SLES15-SP3-CHOST-BYOS-Azure-2024-2267,Image SLES15-SP3-CHOST-BYOS-EC2-2024-2267,Image SLES15-SP3-CHOST-BYOS-GCE-2024-2267,Image SLES15-SP3-CHOST-BYOS-SAP-CCloud-2024-2267,Image SLES15-SP3-HPC-BYOS-Azure-2024-2267,Image SLES15-SP3-HPC-BYOS-EC2-HVM-2024-2267,Image SLES15-SP3-HPC-BYOS-GCE-2024-2267,Image SLES15-SP3-Micro-5-1-BYOS-Azure-2024-2267,Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM-2024-2267,Image SLES15-SP3-Micro-5-1-BYOS-GCE-2024-2267,Image SLES15-SP3-Micro-5-2-BYOS-Azure-2024-2267,Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM-2024-2267,Image SLES15-SP3-Micro-5-2-BYOS-GCE-2024-2267,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2024-2267,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2024-2267,Image SLES15-SP3-SAP-BYOS-Azure-2024-2267,Image SLES15-SP3-SAP-BYOS-EC2-HVM-2024-2267,Image SLES15-SP3-SAP-BYOS-GCE-2024-2267,Image SLES15-SP3-SAPCAL-Azure-2024-2267,Image SLES15-SP3-SAPCAL-EC2-HVM-2024-2267,Image SLES15-SP3-SAPCAL-GCE-2024-2267,SUSE-2024-2267,SUSE-SUSE-MicroOS-5.1-2024-2267,SUSE-SUSE-MicroOS-5.2-2024-2267,openSUSE-SLE-15.5-2024-2267,openSUSE-SLE-15.6-2024-2267 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20242267-1/ Link for SUSE-SU-2024:2267-1 https://lists.suse.com/pipermail/sle-security-updates/2024-July/018843.html E-Mail link for SUSE-SU-2024:2267-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1224282 SUSE Bug 1224282 https://www.suse.com/security/cve/CVE-2024-34459/ SUSE CVE CVE-2024-34459 page Container suse/ltss/sle15.3/bci-base:latest Container suse/sle-micro-rancher/5.2:latest Container suse/sle-micro/5.1/toolbox:latest Container suse/sle-micro/5.2/toolbox:latest Container suse/sle15:15.2 Image SLES15-SP3-BYOS-Azure Image SLES15-SP3-BYOS-EC2-HVM Image SLES15-SP3-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-Aliyun Image SLES15-SP3-CHOST-BYOS-Azure Image SLES15-SP3-CHOST-BYOS-EC2 Image SLES15-SP3-CHOST-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-SAP-CCloud Image SLES15-SP3-HPC-BYOS-Azure Image SLES15-SP3-HPC-BYOS-EC2-HVM Image SLES15-SP3-HPC-BYOS-GCE Image SLES15-SP3-Micro-5-1-BYOS-Azure Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-1-BYOS-GCE Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-BYOS-Azure Image SLES15-SP3-SAP-BYOS-EC2-HVM Image SLES15-SP3-SAP-BYOS-GCE Image SLES15-SP3-SAPCAL-Azure Image SLES15-SP3-SAPCAL-EC2-HVM Image SLES15-SP3-SAPCAL-GCE SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 openSUSE Leap 15.5 openSUSE Leap 15.6 libxml2-2-2.9.7-150000.3.70.1 libxml2-tools-2.9.7-150000.3.70.1 libxml2-devel-2.9.7-150000.3.70.1 libxml2-2-32bit-2.9.7-150000.3.70.1 libxml2-2-64bit-2.9.7-150000.3.70.1 libxml2-devel-32bit-2.9.7-150000.3.70.1 libxml2-devel-64bit-2.9.7-150000.3.70.1 libxml2-doc-2.9.7-150000.3.70.1 python2-libxml2-python-2.9.7-150000.3.70.1 python3-libxml2-python-2.9.7-150000.3.70.1 libxml2-2-2.9.7-150000.3.70.1 as a component of Container suse/ltss/sle15.3/bci-base:latest libxml2-2-2.9.7-150000.3.70.1 as a component of Container suse/sle-micro-rancher/5.2:latest libxml2-2-2.9.7-150000.3.70.1 as a component of Container suse/sle-micro/5.1/toolbox:latest libxml2-2-2.9.7-150000.3.70.1 as a component of Container suse/sle-micro/5.2/toolbox:latest libxml2-2-2.9.7-150000.3.70.1 as a component of Container suse/sle15:15.2 libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-BYOS-Azure libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-BYOS-EC2-HVM libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-BYOS-GCE libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-CHOST-BYOS-Aliyun libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-CHOST-BYOS-Azure libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-CHOST-BYOS-EC2 libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-CHOST-BYOS-GCE libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-CHOST-BYOS-SAP-CCloud libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-HPC-BYOS-Azure libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-HPC-BYOS-EC2-HVM libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-HPC-BYOS-GCE libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-Azure libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-GCE libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-Azure libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-GCE libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production libxml2-tools-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production libxml2-tools-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure libxml2-tools-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM libxml2-tools-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE libxml2-tools-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAPCAL-Azure libxml2-devel-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAPCAL-Azure libxml2-tools-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAPCAL-Azure libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM libxml2-devel-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM libxml2-tools-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM libxml2-2-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAPCAL-GCE libxml2-devel-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAPCAL-GCE libxml2-tools-2.9.7-150000.3.70.1 as a component of Image SLES15-SP3-SAPCAL-GCE libxml2-2-2.9.7-150000.3.70.1 as a component of SUSE Linux Enterprise Micro 5.1 libxml2-tools-2.9.7-150000.3.70.1 as a component of SUSE Linux Enterprise Micro 5.1 libxml2-2-2.9.7-150000.3.70.1 as a component of SUSE Linux Enterprise Micro 5.2 libxml2-tools-2.9.7-150000.3.70.1 as a component of SUSE Linux Enterprise Micro 5.2 python3-libxml2-python-2.9.7-150000.3.70.1 as a component of SUSE Linux Enterprise Micro 5.2 python3-libxml2-python-2.9.7-150000.3.70.1 as a component of openSUSE Leap 15.5 python3-libxml2-python-2.9.7-150000.3.70.1 as a component of openSUSE Leap 15.6 An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c. CVE-2024-34459 Container suse/ltss/sle15.3/bci-base:latest:libxml2-2-2.9.7-150000.3.70.1 Container suse/sle-micro-rancher/5.2:latest:libxml2-2-2.9.7-150000.3.70.1 Container suse/sle-micro/5.1/toolbox:latest:libxml2-2-2.9.7-150000.3.70.1 Container suse/sle-micro/5.2/toolbox:latest:libxml2-2-2.9.7-150000.3.70.1 Container suse/sle15:15.2:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-BYOS-Azure:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-BYOS-EC2-HVM:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-BYOS-GCE:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-CHOST-BYOS-Azure:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-CHOST-BYOS-EC2:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-CHOST-BYOS-GCE:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-HPC-BYOS-Azure:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-HPC-BYOS-GCE:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libxml2-tools-2.9.7-150000.3.70.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libxml2-tools-2.9.7-150000.3.70.1 Image SLES15-SP3-SAP-BYOS-Azure:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-SAP-BYOS-Azure:libxml2-tools-2.9.7-150000.3.70.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:libxml2-tools-2.9.7-150000.3.70.1 Image SLES15-SP3-SAP-BYOS-GCE:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-SAP-BYOS-GCE:libxml2-tools-2.9.7-150000.3.70.1 Image SLES15-SP3-SAPCAL-Azure:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-SAPCAL-Azure:libxml2-devel-2.9.7-150000.3.70.1 Image SLES15-SP3-SAPCAL-Azure:libxml2-tools-2.9.7-150000.3.70.1 Image SLES15-SP3-SAPCAL-EC2-HVM:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-SAPCAL-EC2-HVM:libxml2-devel-2.9.7-150000.3.70.1 Image SLES15-SP3-SAPCAL-EC2-HVM:libxml2-tools-2.9.7-150000.3.70.1 Image SLES15-SP3-SAPCAL-GCE:libxml2-2-2.9.7-150000.3.70.1 Image SLES15-SP3-SAPCAL-GCE:libxml2-devel-2.9.7-150000.3.70.1 Image SLES15-SP3-SAPCAL-GCE:libxml2-tools-2.9.7-150000.3.70.1 SUSE Linux Enterprise Micro 5.1:libxml2-2-2.9.7-150000.3.70.1 SUSE Linux Enterprise Micro 5.1:libxml2-tools-2.9.7-150000.3.70.1 SUSE Linux Enterprise Micro 5.2:libxml2-2-2.9.7-150000.3.70.1 SUSE Linux Enterprise Micro 5.2:libxml2-tools-2.9.7-150000.3.70.1 SUSE Linux Enterprise Micro 5.2:python3-libxml2-python-2.9.7-150000.3.70.1 openSUSE Leap 15.5:python3-libxml2-python-2.9.7-150000.3.70.1 openSUSE Leap 15.6:python3-libxml2-python-2.9.7-150000.3.70.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242267-1/ https://www.suse.com/security/cve/CVE-2024-34459.html CVE-2024-34459 https://bugzilla.suse.com/1224281 SUSE Bug 1224281