Security update for expat SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:3968-1 Final 1 1 2024-11-11T08:57:56Z current 2024-11-11T08:57:56Z 2024-11-11T08:57:56Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for expat This update for expat fixes the following issues: - CVE-2024-50602: Fixed a denial of service via XML_ResumeParser (bsc#1232579). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/ltss/sle12.5/sles12sp5:latest-2024-3968,Container suse/sles12sp5:latest-2024-3968,Image SLES12-SP5-Azure-BYOS-2024-3968,Image SLES12-SP5-Azure-HPC-BYOS-2024-3968,Image SLES12-SP5-Azure-HPC-On-Demand-2024-3968,Image SLES12-SP5-Azure-SAP-BYOS-2024-3968,Image SLES12-SP5-Azure-SAP-On-Demand-2024-3968,Image SLES12-SP5-Azure-Standard-On-Demand-2024-3968,Image SLES12-SP5-EC2-BYOS-2024-3968,Image SLES12-SP5-EC2-ECS-On-Demand-2024-3968,Image SLES12-SP5-EC2-On-Demand-2024-3968,Image SLES12-SP5-EC2-SAP-BYOS-2024-3968,Image SLES12-SP5-EC2-SAP-On-Demand-2024-3968,Image SLES12-SP5-GCE-BYOS-2024-3968,Image SLES12-SP5-GCE-On-Demand-2024-3968,Image SLES12-SP5-GCE-SAP-BYOS-2024-3968,Image SLES12-SP5-GCE-SAP-On-Demand-2024-3968,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2024-3968,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2024-3968,SUSE-2024-3968,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2024-3968 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20243968-1/ Link for SUSE-SU-2024:3968-1 https://lists.suse.com/pipermail/sle-security-updates/2024-November/019807.html E-Mail link for SUSE-SU-2024:3968-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1232579 SUSE Bug 1232579 https://www.suse.com/security/cve/CVE-2024-50602/ SUSE CVE CVE-2024-50602 page Container suse/ltss/sle12.5/sles12sp5:latest Container suse/sles12sp5:latest Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 libexpat1-2.1.0-21.40.1 expat-2.1.0-21.40.1 libexpat-devel-2.1.0-21.40.1 libexpat-devel-32bit-2.1.0-21.40.1 libexpat-devel-64bit-2.1.0-21.40.1 libexpat1-32bit-2.1.0-21.40.1 libexpat1-64bit-2.1.0-21.40.1 libexpat1-2.1.0-21.40.1 as a component of Container suse/ltss/sle12.5/sles12sp5:latest libexpat1-2.1.0-21.40.1 as a component of Container suse/sles12sp5:latest expat-2.1.0-21.40.1 as a component of Image SLES12-SP5-Azure-BYOS libexpat1-2.1.0-21.40.1 as a component of Image SLES12-SP5-Azure-BYOS expat-2.1.0-21.40.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS libexpat1-2.1.0-21.40.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS expat-2.1.0-21.40.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand libexpat1-2.1.0-21.40.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand expat-2.1.0-21.40.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libexpat1-2.1.0-21.40.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS expat-2.1.0-21.40.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libexpat1-2.1.0-21.40.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand expat-2.1.0-21.40.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand libexpat1-2.1.0-21.40.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand expat-2.1.0-21.40.1 as a component of Image SLES12-SP5-EC2-BYOS libexpat1-2.1.0-21.40.1 as a component of Image SLES12-SP5-EC2-BYOS expat-2.1.0-21.40.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand libexpat1-2.1.0-21.40.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand expat-2.1.0-21.40.1 as a component of Image SLES12-SP5-EC2-On-Demand libexpat1-2.1.0-21.40.1 as a component of Image SLES12-SP5-EC2-On-Demand expat-2.1.0-21.40.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libexpat1-2.1.0-21.40.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS expat-2.1.0-21.40.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libexpat1-2.1.0-21.40.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand expat-2.1.0-21.40.1 as a component of Image SLES12-SP5-GCE-BYOS libexpat1-2.1.0-21.40.1 as a component of Image SLES12-SP5-GCE-BYOS expat-2.1.0-21.40.1 as a component of Image SLES12-SP5-GCE-On-Demand libexpat1-2.1.0-21.40.1 as a component of Image SLES12-SP5-GCE-On-Demand expat-2.1.0-21.40.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libexpat1-2.1.0-21.40.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS expat-2.1.0-21.40.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libexpat1-2.1.0-21.40.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand expat-2.1.0-21.40.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libexpat1-2.1.0-21.40.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production expat-2.1.0-21.40.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libexpat1-2.1.0-21.40.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production expat-2.1.0-21.40.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 libexpat1-2.1.0-21.40.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 libexpat1-32bit-2.1.0-21.40.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. CVE-2024-50602 Container suse/ltss/sle12.5/sles12sp5:latest:libexpat1-2.1.0-21.40.1 Container suse/sles12sp5:latest:libexpat1-2.1.0-21.40.1 Image SLES12-SP5-Azure-BYOS:expat-2.1.0-21.40.1 Image SLES12-SP5-Azure-BYOS:libexpat1-2.1.0-21.40.1 Image SLES12-SP5-Azure-HPC-BYOS:expat-2.1.0-21.40.1 Image SLES12-SP5-Azure-HPC-BYOS:libexpat1-2.1.0-21.40.1 Image SLES12-SP5-Azure-HPC-On-Demand:expat-2.1.0-21.40.1 Image SLES12-SP5-Azure-HPC-On-Demand:libexpat1-2.1.0-21.40.1 Image SLES12-SP5-Azure-SAP-BYOS:expat-2.1.0-21.40.1 Image SLES12-SP5-Azure-SAP-BYOS:libexpat1-2.1.0-21.40.1 Image SLES12-SP5-Azure-SAP-On-Demand:expat-2.1.0-21.40.1 Image SLES12-SP5-Azure-SAP-On-Demand:libexpat1-2.1.0-21.40.1 Image SLES12-SP5-Azure-Standard-On-Demand:expat-2.1.0-21.40.1 Image SLES12-SP5-Azure-Standard-On-Demand:libexpat1-2.1.0-21.40.1 Image SLES12-SP5-EC2-BYOS:expat-2.1.0-21.40.1 Image SLES12-SP5-EC2-BYOS:libexpat1-2.1.0-21.40.1 Image SLES12-SP5-EC2-ECS-On-Demand:expat-2.1.0-21.40.1 Image SLES12-SP5-EC2-ECS-On-Demand:libexpat1-2.1.0-21.40.1 Image SLES12-SP5-EC2-On-Demand:expat-2.1.0-21.40.1 Image SLES12-SP5-EC2-On-Demand:libexpat1-2.1.0-21.40.1 Image SLES12-SP5-EC2-SAP-BYOS:expat-2.1.0-21.40.1 Image SLES12-SP5-EC2-SAP-BYOS:libexpat1-2.1.0-21.40.1 Image SLES12-SP5-EC2-SAP-On-Demand:expat-2.1.0-21.40.1 Image SLES12-SP5-EC2-SAP-On-Demand:libexpat1-2.1.0-21.40.1 Image SLES12-SP5-GCE-BYOS:expat-2.1.0-21.40.1 Image SLES12-SP5-GCE-BYOS:libexpat1-2.1.0-21.40.1 Image SLES12-SP5-GCE-On-Demand:expat-2.1.0-21.40.1 Image SLES12-SP5-GCE-On-Demand:libexpat1-2.1.0-21.40.1 Image SLES12-SP5-GCE-SAP-BYOS:expat-2.1.0-21.40.1 Image SLES12-SP5-GCE-SAP-BYOS:libexpat1-2.1.0-21.40.1 Image SLES12-SP5-GCE-SAP-On-Demand:expat-2.1.0-21.40.1 Image SLES12-SP5-GCE-SAP-On-Demand:libexpat1-2.1.0-21.40.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:expat-2.1.0-21.40.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libexpat1-2.1.0-21.40.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:expat-2.1.0-21.40.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libexpat1-2.1.0-21.40.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:expat-2.1.0-21.40.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libexpat1-2.1.0-21.40.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libexpat1-32bit-2.1.0-21.40.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243968-1/ https://www.suse.com/security/cve/CVE-2024-50602.html CVE-2024-50602 https://bugzilla.suse.com/1232579 SUSE Bug 1232579