This update for xerces-c fixes the following security issue:
CVE-2016-0729: Fixed mishandling certain kinds of malformed input documents,
that resulted in buffer overlows during processing and error reporting.
The overflows can manifest as a segmentation fault or as memory
corruption during a parse operation. (bsc#966822)
Affected Packages
libxerces-c-3_1
SUSE Linux Enterprise Desktop 12SUSE Linux Enterprise Desktop 12 SP1SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server for SAP Applications 12SUSE Linux Enterprise Workstation Extension 12
Fixed in:
3.1.1-7.1
libxerces-c-3_1-32bit
SUSE Linux Enterprise Desktop 12SUSE Linux Enterprise Desktop 12 SP1SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server for SAP Applications 12SUSE Linux Enterprise Workstation Extension 12
Fixed in:
3.1.1-7.1
libxerces-c-devel
SUSE Linux Enterprise Server 12 SP1SUSE Linux Enterprise Server for SAP Applications 12 SP1SUSE Linux Enterprise Software Development Kit 12 SP1