SUSE-SU-2024:0777-1

Dashboard / Vulnerabilities / SUSE-SU-2024:0777-1

SUSE-SU-2024:0777-1

Summary: Security update for xmlgraphics-batik

Details: This update for xmlgraphics-batik fixes the following issues: - CVE-2017-5662: Fixed Apache Batik information disclosure vulnerability (bsc#1034675). - CVE-2019-17566: Fixed SSRF vulnerability (bsc#1172961). - CVE-2020-11987: Fixed Apache XML Graphics Batik SSRF vulnerability (bsc#1182748). - CVE-2022-38398: Fixed information disclosure vulnerability (bsc#1203674). - CVE-2022-38648: Fixed information disclosure vulnerability (bsc#1203673). - CVE-2022-40146: Fixed information disclosure vulnerability (bsc#1203672). - CVE-2022-41704: Fixed information disclosure vulnerability in Apache Batik (bsc#1204704). - CVE-2022-42890: Fixed information disclosure vulnerability in Apache Batik (bsc#1204709). - CVE-2022-44729: Fixed Server-Side Request Forgery. - CVE-2022-44730: Fixed Server-Side Request Forgery. Upgrade to version 1.17.

References: https://www.suse.com/support/update/announcement/2024/suse-su-20240777-1/, https://bugzilla.suse.com/1034675, https://bugzilla.suse.com/1172961, https://bugzilla.suse.com/1182748, https://bugzilla.suse.com/1203672, https://bugzilla.suse.com/1203673, https://bugzilla.suse.com/1203674, https://bugzilla.suse.com/1204704, https://bugzilla.suse.com/1204709, https://www.suse.com/security/cve/CVE-2017-5662, https://www.suse.com/security/cve/CVE-2019-17566, https://www.suse.com/security/cve/CVE-2020-11987, https://www.suse.com/security/cve/CVE-2022-38398, https://www.suse.com/security/cve/CVE-2022-38648, https://www.suse.com/security/cve/CVE-2022-40146, https://www.suse.com/security/cve/CVE-2022-41704, https://www.suse.com/security/cve/CVE-2022-42890, https://www.suse.com/security/cve/CVE-2022-44729, https://www.suse.com/security/cve/CVE-2022-44730