Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521). - CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517). - CVE-2020-24977: Fixed a global-buffer-overflow in xmlEncodeEntitiesInternal (bsc#1176179). - Fixed invalid xmlns references due to CVE-2019-19956 (bsc#1172021).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for libxml2 fixes the following issues: - CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521). - CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517). - CVE-2020-24977: Fixed a global-buffer-overflow in xmlEncodeEntitiesInternal (bsc#1176179). - Fixed invalid xmlns references due to CVE-2019-19956 (bsc#1172021).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1159928
- https://bugzilla.suse.com/1161517
- https://bugzilla.suse.com/1161521
- https://bugzilla.suse.com/1172021
- https://bugzilla.suse.com/1176179
- https://www.suse.com/security/cve/CVE-2019-19956
- https://www.suse.com/security/cve/CVE-2019-20388
- https://www.suse.com/security/cve/CVE-2020-24977
- https://www.suse.com/security/cve/CVE-2020-7595
- https://www.suse.com/support/update/announcement/2020/suse-su-20202609-1/