FEDORA-2020-0c71c00af4 — security update for libxml2

stable

libxml2-2.9.10-3.fc30

FEDORA-2020-0c71c00af4 created by amigadave 4 years ago for Fedora 30

Update to 2.9.10 and fix CVE-2019-19956, CVE-2019-20388 and CVE-2020-7595

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2020-0c71c00af4

This update has been submitted for testing by amigadave.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update has been pushed to testing.

4 years ago

pwalter commented & provided feedback 4 years ago

karma

Works

This update can be pushed to stable now if the maintainer wishes

4 years ago

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

Builds

libxml2-2.9.10-3.fc30

BZ#1788857 CVE-2019-19956 libxml2: There's a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c that could result in a crash [fedora-30]

BZ#1799736 CVE-2019-20388 libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c [fedora-all]

BZ#1799787 CVE-2020-7595 libxml2: infinite loop in a certain end-of-file situation [fedora-all]

libxml2-2.9.10-3.fc30

Automated Test Results

ignored