File _patchinfo of Package patchinfo.5050

<patchinfo incident="5050">
  <issue id="1044894" tracker="bnc">VUL-0:  CVE-2017-7375: libxml2: Missing validation for external entities in xmlParsePEReference</issue>
  <issue id="1044887" tracker="bnc">VUL-0: CVE-2017-7376 libxml2: Incorrect limit used for port values</issue>
  <issue id="2017-7375" tracker="cve" />
  <issue id="2017-7376" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>pmonrealgonzalez</packager>
  <description>This update for libxml2 fixes the following issues:

Security issues fixed:

* CVE-2017-7376: Increase buffer space for port in HTTP redirect support (bsc#1044887)
* CVE-2017-7375: Prevent unwanted external entity reference [bsc#1044894, ]

</description>
  <summary>Security update for libxml2</summary>
</patchinfo>
openSUSE Build Service is sponsored by