RHSA-2020:3996: Moderate: libxml2 security and bug fix update
The libxml2 library is a development toolbox providing the implementation of various XML standards.Security Fix(es): libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c (CVE-2019-19956) libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388) libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:3996?
The severity of RHSA-2020:3996 is classified as moderate due to memory leak vulnerabilities in libxml2.
How do I fix RHSA-2020:3996?
To fix RHSA-2020:3996, update the libxml2 package to version 2.9.1-6.el7.5 or later.
What vulnerabilities are addressed in RHSA-2020:3996?
RHSA-2020:3996 addresses memory leak vulnerabilities in xmlParseBalancedChunkMemoryRecover and xmlSchemaPreRun.
Which versions of libxml2 are affected by RHSA-2020:3996?
Versions of libxml2 before 2.9.1-6.el7.5 are affected by RHSA-2020:3996.
Is there any impact from the vulnerabilities in RHSA-2020:3996?
Yes, the memory leaks may lead to increased resource consumption over time, potentially affecting application performance.