FEDORA-2020-7694e8be73 — security update for mingw-libxml2

stable

mingw-libxml2-2.9.10-1.fc32

FEDORA-2020-7694e8be73 created by amigadave 4 years ago for Fedora 32

Update to 2.9.10

Fix CVE-2019-19956, CVE-2019-20388 and CVE-2020-7595

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2020-7694e8be73

This update has been submitted for testing by amigadave.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update has been pushed to testing.

4 years ago

This update can be pushed to stable now if the maintainer wishes

4 years ago

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

mingw-libxml2-2.9.10-1.fc32

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

BZ#1788858 CVE-2019-19956 mingw-libxml2: libxml2: There's a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c that could result in a crash [fedora-all]

BZ#1799738 CVE-2019-20388 mingw-libxml2: libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c [fedora-all]

BZ#1799788 CVE-2020-7595 mingw-libxml2: libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations [fedora-all]

mingw-libxml2-2.9.10-1.fc32

Automated Test Results

ignored