Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 31 Advisory: libxml2 Security Fix for CVE-2020-24977

fedora
Calendar Grey September 25, 2020
Dist Fedora Esm H88
Fedora 31 has issued a security update for the libxml2 package to fix vulnerabilities described in CVE-2020-24977, which may lead to denial of service from malicious XML documents
Add fix for CVE-2020-24977 (RHBZ#1877788).

Summary

This library allows to manipulate XML files. It includes support

to read, modify and write XML and HTML files. There is DTDs support

this includes parsing and validation even with complex DtDs, either

at parse time or later once the document has been modified. The output

can be a simple SAX stream or and in-memory DOM like representations.

In this case one can use the built-in XPath and XPointer implementation

to select sub nodes or ranges. A flexible Input/Output mechanism is

available, with existing HTTP and FTP modules and combined to an

URI library.

Add fix for CVE-2020-24977 (RHBZ#1877788).

* Fri Sep 11 2020 Richard W.M. Jones - 2.9.10-4

- Add fix for CVE-2020-24977 (RHBZ#1877788).

su -c 'dnf upgrade --advisory FEDORA-2020-20ab468a33' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
important
Lowest
Low
Medium
High
Critical

Product: Fedora 31
Version: 2.9.10
Release: 4.fc31
URL:
Summary: Library providing XML and HTML support

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here