SUSE-SU-2022:14889-1

Details

Description of the patch:

This update for xerces-j2 fixes the following issues:

CVE-2022-23437: Fixed infinite loop within Apache XercesJ xml parser (bsc#1195108).

Affected Packages

xerces-j2

SUSE Linux Enterprise High Performance Computing 11 SP4SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server 11 SP4-LTSSSUSE Linux Enterprise Server for SAP Applications 11 SP4

Fixed in:

0:2.8.1-238.29.8.1

xerces-j2-xml-apis

SUSE Linux Enterprise High Performance Computing 11 SP4SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server 11 SP4-LTSSSUSE Linux Enterprise Server for SAP Applications 11 SP4

Fixed in:

0:2.8.1-238.29.8.1

xerces-j2-xml-resolver

SUSE Linux Enterprise High Performance Computing 11 SP4SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server 11 SP4-LTSSSUSE Linux Enterprise Server for SAP Applications 11 SP4

Fixed in:

0:2.8.1-238.29.8.1

References

ADVISORY

https://bugzilla.suse.com/1195108

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2022-February/010256.html

ADVISORY

https://www.suse.com/security/cve/CVE-2022-23437/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2022/suse-su-202214889-1/