SUSE-SU-2021:2920-1

UNKNOWN

Security update for xerces-c

Published Sep 2, 2021

Modified 4 years ago

Fix available

Details

This update for xerces-c fixes the following issues:

CVE-2018-1311: Fixed use-after-free inside XML parser during the scanning of external DTDs (bsc#1159552).

Affected Packages

libxerces-c-3_1

SUSE Enterprise Storage 6SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE Linux Enterprise High Performance Computing 15-LTSS

Fixed in:

3.1.4-3.6.1

libxerces-c-devel

Fixed in:

3.1.4-3.6.1

xerces-c

Fixed in:

3.1.4-3.6.1

References

REPORT

https://bugzilla.suse.com/1159552

WEB