SUSE-SU-2019:1570-1

Details

Description of the patch:

This update for doxygen fixes the following issues:

CVE-2016-10245: XSS was possible via insufficient sanitization of the query parameter in templates/html/search_opensearch.php (bsc#1136364)

Affected Packages

doxygen

SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP3

Fixed in:

1.8.6-3.3.1

References

ADVISORY

https://bugzilla.suse.com/1136364

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2019-June/005588.html

ADVISORY

https://www.suse.com/security/cve/CVE-2016-10245/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2019/suse-su-20191570-1/