Medium ELSA-2021-1597 1 CVE

Moderate: libxml2 security update (Oracle Linux 8)

Published May 25, 2021 · Updated May 25, 2021

Ecosystem: Oracle Linux

Summary

[2.9.7-9.0.1]
- Update doc/redhat.gif in tarball
- Add libxml2-oracle-enterprise.patch and update logos in tarball

[2.9.7-9]
- Fix CVE-2020-24977 (#1878252)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	libxml2	0:2.9.7-9.0.1.el8
Oracle Linux · 8	libxml2-devel	0:2.9.7-9.0.1.el8
Oracle Linux · 8	python3-libxml2	0:2.9.7-9.0.1.el8

Vulnerabilities 1

Unscored —

CVE-2020-24977

GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entit…

libxml2 libxml2 libxml2 Debian Ubuntu Alpine

Sep 3, 2020