Security update for libxml2
This update for libxml2 fixes the following issues:
- CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521).
- CVE-2019-19956: Fixed a memory leak (bsc#1159928).
- CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517).
This update was imported from the SUSE:SLE-15:Update update project.
-
Submitted by
Pedro Monreal Gonzalez (pmonrealgonzalez)
Fixed bugs
bnc#1159928
VUL-1: CVE-2019-19956: libxml2: xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.
bnc#1161517
VUL-1: CVE-2020-7595: libxml2: xmlStringLenDecodeEntities in parser.c has an infinite loop in a certain end-of-file situation
bnc#1161521
VUL-1: CVE-2019-20388: libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c