Security update for expat SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:3966-1 Final 1 1 2024-11-11T08:34:17Z current 2024-11-11T08:34:17Z 2024-11-11T08:34:17Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for expat This update for expat fixes the following issues: - CVE-2024-50602: Fixed a denial of service via XML_ResumeParser (bsc#1232579). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sle-micro-rancher/5.2:latest-2024-3966,Container suse/sle-micro/5.1/toolbox:latest-2024-3966,Container suse/sle-micro/5.2/toolbox:latest-2024-3966,Image SLES15-SP3-BYOS-Azure-2024-3966,Image SLES15-SP3-BYOS-EC2-HVM-2024-3966,Image SLES15-SP3-BYOS-GCE-2024-3966,Image SLES15-SP3-HPC-BYOS-Azure-2024-3966,Image SLES15-SP3-HPC-BYOS-EC2-HVM-2024-3966,Image SLES15-SP3-HPC-BYOS-GCE-2024-3966,Image SLES15-SP3-Micro-5-1-BYOS-Azure-2024-3966,Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM-2024-3966,Image SLES15-SP3-Micro-5-1-BYOS-GCE-2024-3966,Image SLES15-SP3-Micro-5-2-BYOS-Azure-2024-3966,Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM-2024-3966,Image SLES15-SP3-Micro-5-2-BYOS-GCE-2024-3966,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2024-3966,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2024-3966,Image SLES15-SP3-SAP-BYOS-Azure-2024-3966,Image SLES15-SP3-SAP-BYOS-EC2-HVM-2024-3966,Image SLES15-SP3-SAP-BYOS-GCE-2024-3966,Image SLES15-SP3-SAPCAL-Azure-2024-3966,Image SLES15-SP3-SAPCAL-EC2-HVM-2024-3966,Image SLES15-SP3-SAPCAL-GCE-2024-3966,SUSE-2024-3966,SUSE-SUSE-MicroOS-5.1-2024-3966,SUSE-SUSE-MicroOS-5.2-2024-3966 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20243966-1/ Link for SUSE-SU-2024:3966-1 https://lists.suse.com/pipermail/sle-security-updates/2024-November/019808.html E-Mail link for SUSE-SU-2024:3966-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1232579 SUSE Bug 1232579 https://www.suse.com/security/cve/CVE-2024-50602/ SUSE CVE CVE-2024-50602 page Container suse/sle-micro-rancher/5.2:latest Container suse/sle-micro/5.1/toolbox:latest Container suse/sle-micro/5.2/toolbox:latest Image SLES15-SP3-BYOS-Azure Image SLES15-SP3-BYOS-EC2-HVM Image SLES15-SP3-BYOS-GCE Image SLES15-SP3-HPC-BYOS-Azure Image SLES15-SP3-HPC-BYOS-EC2-HVM Image SLES15-SP3-HPC-BYOS-GCE Image SLES15-SP3-Micro-5-1-BYOS-Azure Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-1-BYOS-GCE Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-BYOS-Azure Image SLES15-SP3-SAP-BYOS-EC2-HVM Image SLES15-SP3-SAP-BYOS-GCE Image SLES15-SP3-SAPCAL-Azure Image SLES15-SP3-SAPCAL-EC2-HVM Image SLES15-SP3-SAPCAL-GCE SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 libexpat1-2.2.5-150000.3.33.1 expat-2.2.5-150000.3.33.1 libexpat-devel-2.2.5-150000.3.33.1 libexpat-devel-32bit-2.2.5-150000.3.33.1 libexpat-devel-64bit-2.2.5-150000.3.33.1 libexpat1-32bit-2.2.5-150000.3.33.1 libexpat1-64bit-2.2.5-150000.3.33.1 libexpat1-2.2.5-150000.3.33.1 as a component of Container suse/sle-micro-rancher/5.2:latest libexpat1-2.2.5-150000.3.33.1 as a component of Container suse/sle-micro/5.1/toolbox:latest libexpat1-2.2.5-150000.3.33.1 as a component of Container suse/sle-micro/5.2/toolbox:latest libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-BYOS-Azure libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-BYOS-EC2-HVM libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-BYOS-GCE libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-HPC-BYOS-Azure libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-HPC-BYOS-EC2-HVM libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-HPC-BYOS-GCE libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-Azure libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-GCE libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-Azure libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-GCE expat-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production expat-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production expat-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure expat-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM expat-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE expat-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAPCAL-Azure libexpat-devel-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAPCAL-Azure libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAPCAL-Azure expat-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM libexpat-devel-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM expat-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAPCAL-GCE libexpat-devel-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAPCAL-GCE libexpat1-2.2.5-150000.3.33.1 as a component of Image SLES15-SP3-SAPCAL-GCE libexpat1-2.2.5-150000.3.33.1 as a component of SUSE Linux Enterprise Micro 5.1 libexpat1-2.2.5-150000.3.33.1 as a component of SUSE Linux Enterprise Micro 5.2 An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. CVE-2024-50602 Container suse/sle-micro-rancher/5.2:latest:libexpat1-2.2.5-150000.3.33.1 Container suse/sle-micro/5.1/toolbox:latest:libexpat1-2.2.5-150000.3.33.1 Container suse/sle-micro/5.2/toolbox:latest:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-BYOS-Azure:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-BYOS-EC2-HVM:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-BYOS-GCE:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-HPC-BYOS-Azure:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-HPC-BYOS-GCE:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:expat-2.2.5-150000.3.33.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:expat-2.2.5-150000.3.33.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-SAP-BYOS-Azure:expat-2.2.5-150000.3.33.1 Image SLES15-SP3-SAP-BYOS-Azure:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:expat-2.2.5-150000.3.33.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-SAP-BYOS-GCE:expat-2.2.5-150000.3.33.1 Image SLES15-SP3-SAP-BYOS-GCE:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-SAPCAL-Azure:expat-2.2.5-150000.3.33.1 Image SLES15-SP3-SAPCAL-Azure:libexpat-devel-2.2.5-150000.3.33.1 Image SLES15-SP3-SAPCAL-Azure:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-SAPCAL-EC2-HVM:expat-2.2.5-150000.3.33.1 Image SLES15-SP3-SAPCAL-EC2-HVM:libexpat-devel-2.2.5-150000.3.33.1 Image SLES15-SP3-SAPCAL-EC2-HVM:libexpat1-2.2.5-150000.3.33.1 Image SLES15-SP3-SAPCAL-GCE:expat-2.2.5-150000.3.33.1 Image SLES15-SP3-SAPCAL-GCE:libexpat-devel-2.2.5-150000.3.33.1 Image SLES15-SP3-SAPCAL-GCE:libexpat1-2.2.5-150000.3.33.1 SUSE Linux Enterprise Micro 5.1:libexpat1-2.2.5-150000.3.33.1 SUSE Linux Enterprise Micro 5.2:libexpat1-2.2.5-150000.3.33.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243966-1/ https://www.suse.com/security/cve/CVE-2024-50602.html CVE-2024-50602 https://bugzilla.suse.com/1232579 SUSE Bug 1232579