MGASA-2020-0271

Source
https://advisories.mageia.org/MGASA-2020-0271.html
Import Source
https://advisories.mageia.org/MGASA-2020-0271.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2020-0271
Related
Published
2020-07-04T22:47:21Z
Modified
2020-07-04T22:14:54Z
Summary
Updated libxml2 packages fix security vulnerability
Details

Updated libxml2 packages fix security vulnerability:

The fix for CVE-2019-19956 introduced regressions which can cause invalid xmlns references in output and memory leaks, possibly leading to more serious security issues. The broken fix has been reverted.

References
Credits

Affected packages

Mageia:7 / libxml2

Package

Name
libxml2
Purl
pkg:rpm/mageia/libxml2?distro=mageia-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.9.9-2.4.mga7

Ecosystem specific

{
    "section": "core"
}