SUSE: 2020:2609-1 Moderate: libxml2 Memory Leak, Buffer Overflow Fix
suse
September 11, 2020
An update that solves four vulnerabilities and has one errata is now available
Summary
This update for libxml2 fixes the following issues: - CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521). - CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517). - CVE-2020-24977: Fixed a global-buffer-overflow in xmlEncodeEntitiesInternal (bsc#1176179). - Fixed invalid xmlns references due to CVE-2019-19956 (bsc#1172021). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2020-2609=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2020-2609=1 Package List:
Topics Covered
References
#1159928 #1161517 #1161521 #1172021 #1176179
Cross- CVE-2019-19956 CVE-2019-20388 CVE-2020-24977
CVE-2020-7595
Affected Products:
SUSE Linux Enterprise Software Development Kit 12-SP5
SUSE Linux Enterprise Server 12-SP5
https://www.suse.com/security/cve/CVE-2019-19956.html
https://www.suse.com/security/cve/CVE-2019-20388.html
https://www.suse.com/security/cve/CVE-2020-24977.html
https://www.suse.com/security/cve/CVE-2020-7595.html
https://bugzilla.suse.com/1159928
https://bugzilla.suse.com/1161517
https://bugzilla.suse.com/1161521
https://bugzilla.suse.com/1172021
https://bugzilla.suse.com/1176179
PREVIOUS
NEXT
Announcement ID: SUSE-SU-2020:2609-1
Rating: moderate
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!