SUSE-SU-2017:2744-1
Security update for xerces-j2
No scoreFix available
xerces-j2 was updated to fix several issues.
This security issue was fixed:
- bsc#814241: Prevent possible DoS through very long attribute names
This non-security issue was fixed:
- Prevent StackOverflowError when applying a pattern restriction on long strings while trying to validate an XML file against a schema (bsc#1047536, bsc#879138)
What each source reports
OSVNo score
Security update for xerces-j2
xerces-j2 was updated to fix several issues.
This security issue was fixed:
- bsc#814241: Prevent possible DoS through very long attribute names
This non-security issue was fixed:
- Prevent StackOverflowError when applying a pattern restriction on long strings while trying to validate an XML file against a schema (bsc#1047536, bsc#879138)
- Record
SUSE-SU-2017:2744-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xerces-j2SUSE:Linux Enterprise Desktop 12 SP2 | before 2.8.1-268.6.2 | 2.8.1-268.6.2 |
xerces-j2SUSE:Linux Enterprise Desktop 12 SP3 | before 2.8.1-268.6.2 | 2.8.1-268.6.2 |
xerces-j2SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | before 2.8.1-268.6.2 | 2.8.1-268.6.2 |
xerces-j2SUSE:Linux Enterprise Software Development Kit 12 SP2 | before 2.8.1-268.6.2 | 2.8.1-268.6.2 |
xerces-j2SUSE:Linux Enterprise Software Development Kit 12 SP3 | before 2.8.1-268.6.2 | 2.8.1-268.6.2 |
xerces-j2SUSE:Linux Enterprise Server 12 SP2 | before 2.8.1-268.6.2 | 2.8.1-268.6.2 |
xerces-j2SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | before 2.8.1-268.6.2 | 2.8.1-268.6.2 |
xerces-j2SUSE:Linux Enterprise Server 12 SP3 | before 2.8.1-268.6.2 | 2.8.1-268.6.2 |
xerces-j2SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | before 2.8.1-268.6.2 | 2.8.1-268.6.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
SUSE-SU-2017:2744-1 is a vulnerability with no CVSS score yet in xerces-j2, published October 17, 2017. No source lists public exploit code. Fixed in xerces-j2 2.8.1-268.6.2.