SUSE-SU-2019:1570-1

Details

This update for doxygen fixes the following issues:

CVE-2016-10245: XSS was possible via insufficient sanitization of the query parameter in templates/html/search_opensearch.php (bsc#1136364)

Affected Packages

doxygen

SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Software Development Kit 12 SP3SUSE Linux Enterprise Software Development Kit 12 SP4SUSE Linux Enterprise Workstation Extension 12 SP3

Fixed in:

1.8.6-3.3.1

References

REPORT

https://bugzilla.suse.com/1136364

WEB

https://www.suse.com/security/cve/CVE-2016-10245

ADVISORY

https://www.suse.com/support/update/announcement/2019/suse-su-20191570-1/