CVE-2019-20388

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.

• CVE-2021-3517.patch: validate UTF8 in xmlEncodeEntities
• CVE-2021-3518.patch: fix user-after-free with 'xmllint --xinclude --dropdtd'
• CVE-2021-3537.patch: propagate error in xmlParseElementChildrenContentDeclPriv
• CVE-2021-3541.patch: parser fix for the billion laughs attack
• CVE-2021-3516.patch: fix use-after-free with 'xmllint --html --push'
• CVE-2017-8872.patch: free input buffer in xmlHaltParser
• CVE-2019-20388.patch: fix memory leak in xmlSchemaValidateStream
• CVE-2020-24977.patch: fix out-of-bounds read with 'xmllint --htmlout'

• SECURITY UPDATE: Out-of-bounds array access
  • debian/patches/CVE-2021-3517.patch: Validate UTF8 in xmlEncodeEntities
  • CVE-2021-3517
• SECURITY UPDATE: Use-after-free error
  • debian/patches/CVE-2021-3518.patch: Fix use-after-free with 'xmllint --xinclude --dropdtd'
  • CVE-2021-3518
• SECURITY UPDATE: Null pointer dereference while parsing in recovery mode
  • debian/patches/CVE-2021-3537.patch: Propagate error in xmlParseElementChildrenContentDeclPriv
  • CVE-2021-3537
• SECURITY UPDATE: Parser fix for the billion laugs attach
  • debian/patches/CVE-2021-3541.patch: Fix parameter entities expansion in xmlParserEntityCheck
  • CVE-2021-3541
• SECURITY UPDATE: Miscalculation of available bytes when parsing
  • debian/patches/CVE-2017-8872.patch: Free input buffer in xmlHaltParser
  • CVE-2017-8872
• SECURITY UPDATE: Memory leak
  • debian/patches/CVE-2019-20388.patch: Fix memory leak in xmlSchemaValidateStream
  • CVE-2019-20388
• SECURITY UPDATE: Out-of-bounds array access
  • debian/patches/CVE-2020-24977.patch: Fix out-of-bounds read with 'xmllint --htmlout'
  • CVE-2020-24977
• SECURITY UPDATE: Use-after-free error
  • debian/patches/CVE-2021-3516.patch: Fix use-after-free with 'xmllint --html --push'
  • CVE-2021-3516

• CVE-2021-3517.patch: validate UTF8 in xmlEncodeEntities
• CVE-2021-3518.patch: fix user-after-free with 'xmllint --xinclude --dropdtd'
• CVE-2021-3537.patch: propagate error in xmlParseElementChildrenContentDeclPriv
• CVE-2021-3541.patch: parser fix for the billion laughs attack
• CVE-2021-3516.patch: fix use-after-free with 'xmllint --html --push'
• CVE-2017-8872.patch: free input buffer in xmlHaltParser
• CVE-2019-20388.patch: fix memory leak in xmlSchemaValidateStream
• CVE-2020-24977.patch: fix out-of-bounds read with 'xmllint --htmlout'

Updated libxml2 packages fix security vulnerabilities:

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak (CVE-2019-20388).

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation (CVE-2020-7595).

This update for libxml2 fixes the following issues:

• CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521).
• CVE-2019-19956: Fixed a memory leak (bsc#1159928).
• CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517).

This update was imported from the SUSE:SLE-15:Update update project.

These are all security issues fixed in the libxml2-2-2.9.12-1.2 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ruby2.7-rubygem-nokogiri-1.12.3-1.2 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ruby3.1-rubygem-nokogiri-1.13.3-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ruby3.2-rubygem-nokogiri-1.13.9-1.7 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ruby3.3-rubygem-nokogiri-1.15.5-1.5 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ruby3.4-rubygem-nokogiri-1.18.2-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ruby4.0-rubygem-nokogiri-1.18.9-1.4 package on the GA media of openSUSE Tumbleweed.

This update for libxml2 fixes the following issues:

• CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521).
• CVE-2019-19956: Fixed a memory leak (bsc#1159928).
• CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517).

This update for libxml2 fixes the following issues:

• CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521).
• CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517).
• CVE-2020-24977: Fixed a global-buffer-overflow in xmlEncodeEntitiesInternal (bsc#1176179).
• Fixed invalid xmlns references due to CVE-2019-19956 (bsc#1172021).

This update for libxml2 fixes the following issues:

Security issues fixed:

• CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel (bsc#1185698)
• CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess (bsc#1185408).
• CVE-2021-3517: Fixed a heap based buffer overflow in entities.c:xmlEncodeEntitiesInternal (bsc#1185410).
• CVE-2021-3516: Fixed a use after free in xmlEncodeEntitiesInternal() in entities.c (bsc#1185409)
• CVE-2020-24977: Fixed a global-buffer-overflow in xmlEncodeEntitiesInternal (bsc#1176179).
• CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521).
• CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517).
• CVE-2019-19956: Fixed a memory leak in xmlParseBalancedChunkMemoryRecover (bsc#1159928).

Yunho Kim discovered that libxml2 incorrectly handled certain error conditions. A remote attacker could exploit this with a crafted XML file to cause a denial of service, or possibly cause libxml2 to expose sensitive information. This issue only affected Ubuntu 14.04 ESM, and Ubuntu 16.04 ESM. (CVE-2017-8872)

Zhipeng Xie discovered that libxml2 incorrectly handled certain XML schemas. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 LTS. (CVE-2019-20388)

It was discovered that libxml2 incorrectly handled invalid UTF-8 input. A remote attacker could possibly exploit this with a crafted XML file to cause libxml2 to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 20.10. (CVE-2020-24977)

It was discovered that libxml2 incorrectly handled invalid UTF-8 input. A remote attacker could possibly exploit this with a crafted XML file to cause libxml2 to crash, resulting in a denial of service. (CVE-2021-3517)

It was discovered that libxml2 did not properly handle certain crafted XML files. A local attacker could exploit this with a crafted input to cause libxml2 to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2021-3516, CVE-2021-3518)

It was discovered that libxml2 incorrectly handled error states. A remote attacker could exploit this with a crafted XML file to cause libxml2 to crash, resulting in a denial of service. (CVE-2021-3537)

Sebastian Pipping discovered that libxml2 did not properly handle certain crafted XML files. A remote attacker could exploit this with a crafted XML file to cause libxml2 to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. (CVE-2021-3541)