csaf_redhat - rhsa-2020

rhsa-2020_4479

Vulnerability from csaf_redhat

Published

2020-11-04 02:12

Modified

2024-11-22 14:57

Summary

Red Hat Security Advisory: libxml2 security update

Notes

Topic

An update for libxml2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c (CVE-2019-19956) * libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388) * libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://access.redhat.com/security/updates/classification/",
         text: "Moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright © Red Hat, Inc. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "An update for libxml2 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
            title: "Topic",
         },
         {
            category: "general",
            text: "The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c (CVE-2019-19956)\n\n* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)\n\n* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.",
            title: "Details",
         },
         {
            category: "legal_disclaimer",
            text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
            title: "Terms of Use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://access.redhat.com/security/team/contact/",
         issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
         name: "Red Hat Product Security",
         namespace: "https://www.redhat.com",
      },
      references: [
         {
            category: "self",
            summary: "https://access.redhat.com/errata/RHSA-2020:4479",
            url: "https://access.redhat.com/errata/RHSA-2020:4479",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/security/updates/classification/#moderate",
            url: "https://access.redhat.com/security/updates/classification/#moderate",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/",
            url: "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/",
         },
         {
            category: "external",
            summary: "1788856",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1788856",
         },
         {
            category: "external",
            summary: "1799734",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1799734",
         },
         {
            category: "external",
            summary: "1799786",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1799786",
         },
         {
            category: "self",
            summary: "Canonical URL",
            url: "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4479.json",
         },
      ],
      title: "Red Hat Security Advisory: libxml2 security update",
      tracking: {
         current_release_date: "2024-11-22T14:57:44+00:00",
         generator: {
            date: "2024-11-22T14:57:44+00:00",
            engine: {
               name: "Red Hat SDEngine",
               version: "4.2.1",
            },
         },
         id: "RHSA-2020:4479",
         initial_release_date: "2020-11-04T02:12:23+00:00",
         revision_history: [
            {
               date: "2020-11-04T02:12:23+00:00",
               number: "1",
               summary: "Initial version",
            },
            {
               date: "2020-11-04T02:12:23+00:00",
               number: "2",
               summary: "Last updated version",
            },
            {
               date: "2024-11-22T14:57:44+00:00",
               number: "3",
               summary: "Last generated version",
            },
         ],
         status: "final",
         version: "3",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux AppStream (v. 8)",
                        product: {
                           name: "Red Hat Enterprise Linux AppStream (v. 8)",
                           product_id: "AppStream-8.3.0.GA",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:enterprise_linux:8::appstream",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux BaseOS (v. 8)",
                        product: {
                           name: "Red Hat Enterprise Linux BaseOS (v. 8)",
                           product_id: "BaseOS-8.3.0.GA",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:8::baseos",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "Red Hat Enterprise Linux",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-0:2.9.7-8.el8.i686",
                        product: {
                           name: "libxml2-0:2.9.7-8.el8.i686",
                           product_id: "libxml2-0:2.9.7-8.el8.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-debugsource-0:2.9.7-8.el8.i686",
                        product: {
                           name: "libxml2-debugsource-0:2.9.7-8.el8.i686",
                           product_id: "libxml2-debugsource-0:2.9.7-8.el8.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-debuginfo-0:2.9.7-8.el8.i686",
                        product: {
                           name: "libxml2-debuginfo-0:2.9.7-8.el8.i686",
                           product_id: "libxml2-debuginfo-0:2.9.7-8.el8.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
                        product: {
                           name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
                           product_id: "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-devel-0:2.9.7-8.el8.i686",
                        product: {
                           name: "libxml2-devel-0:2.9.7-8.el8.i686",
                           product_id: "libxml2-devel-0:2.9.7-8.el8.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=i686",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i686",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-0:2.9.7-8.el8.x86_64",
                        product: {
                           name: "libxml2-0:2.9.7-8.el8.x86_64",
                           product_id: "libxml2-0:2.9.7-8.el8.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-libxml2-0:2.9.7-8.el8.x86_64",
                        product: {
                           name: "python3-libxml2-0:2.9.7-8.el8.x86_64",
                           product_id: "python3-libxml2-0:2.9.7-8.el8.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python3-libxml2@2.9.7-8.el8?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
                        product: {
                           name: "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
                           product_id: "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                        product: {
                           name: "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                           product_id: "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                        product: {
                           name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                           product_id: "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-devel-0:2.9.7-8.el8.x86_64",
                        product: {
                           name: "libxml2-devel-0:2.9.7-8.el8.x86_64",
                           product_id: "libxml2-devel-0:2.9.7-8.el8.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=x86_64",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-0:2.9.7-8.el8.ppc64le",
                        product: {
                           name: "libxml2-0:2.9.7-8.el8.ppc64le",
                           product_id: "libxml2-0:2.9.7-8.el8.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-libxml2-0:2.9.7-8.el8.ppc64le",
                        product: {
                           name: "python3-libxml2-0:2.9.7-8.el8.ppc64le",
                           product_id: "python3-libxml2-0:2.9.7-8.el8.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python3-libxml2@2.9.7-8.el8?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
                        product: {
                           name: "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
                           product_id: "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                        product: {
                           name: "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                           product_id: "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                        product: {
                           name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                           product_id: "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-devel-0:2.9.7-8.el8.ppc64le",
                        product: {
                           name: "libxml2-devel-0:2.9.7-8.el8.ppc64le",
                           product_id: "libxml2-devel-0:2.9.7-8.el8.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=ppc64le",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-0:2.9.7-8.el8.s390x",
                        product: {
                           name: "libxml2-0:2.9.7-8.el8.s390x",
                           product_id: "libxml2-0:2.9.7-8.el8.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-libxml2-0:2.9.7-8.el8.s390x",
                        product: {
                           name: "python3-libxml2-0:2.9.7-8.el8.s390x",
                           product_id: "python3-libxml2-0:2.9.7-8.el8.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python3-libxml2@2.9.7-8.el8?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-debugsource-0:2.9.7-8.el8.s390x",
                        product: {
                           name: "libxml2-debugsource-0:2.9.7-8.el8.s390x",
                           product_id: "libxml2-debugsource-0:2.9.7-8.el8.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                        product: {
                           name: "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                           product_id: "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                        product: {
                           name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                           product_id: "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-devel-0:2.9.7-8.el8.s390x",
                        product: {
                           name: "libxml2-devel-0:2.9.7-8.el8.s390x",
                           product_id: "libxml2-devel-0:2.9.7-8.el8.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=s390x",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-0:2.9.7-8.el8.aarch64",
                        product: {
                           name: "libxml2-0:2.9.7-8.el8.aarch64",
                           product_id: "libxml2-0:2.9.7-8.el8.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-libxml2-0:2.9.7-8.el8.aarch64",
                        product: {
                           name: "python3-libxml2-0:2.9.7-8.el8.aarch64",
                           product_id: "python3-libxml2-0:2.9.7-8.el8.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python3-libxml2@2.9.7-8.el8?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
                        product: {
                           name: "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
                           product_id: "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                        product: {
                           name: "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                           product_id: "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                        product: {
                           name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                           product_id: "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-devel-0:2.9.7-8.el8.aarch64",
                        product: {
                           name: "libxml2-devel-0:2.9.7-8.el8.aarch64",
                           product_id: "libxml2-devel-0:2.9.7-8.el8.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=aarch64",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-0:2.9.7-8.el8.src",
                        product: {
                           name: "libxml2-0:2.9.7-8.el8.src",
                           product_id: "libxml2-0:2.9.7-8.el8.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=src",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "src",
               },
            ],
            category: "vendor",
            name: "Red Hat",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
            },
            product_reference: "libxml2-0:2.9.7-8.el8.aarch64",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
            },
            product_reference: "libxml2-0:2.9.7-8.el8.i686",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
            },
            product_reference: "libxml2-0:2.9.7-8.el8.ppc64le",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
            },
            product_reference: "libxml2-0:2.9.7-8.el8.s390x",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-0:2.9.7-8.el8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
            },
            product_reference: "libxml2-0:2.9.7-8.el8.src",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
            },
            product_reference: "libxml2-0:2.9.7-8.el8.x86_64",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debuginfo-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
            },
            product_reference: "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debuginfo-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
            },
            product_reference: "libxml2-debuginfo-0:2.9.7-8.el8.i686",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
            },
            product_reference: "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debuginfo-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
            },
            product_reference: "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debuginfo-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
            },
            product_reference: "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debugsource-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
            },
            product_reference: "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debugsource-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
            },
            product_reference: "libxml2-debugsource-0:2.9.7-8.el8.i686",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debugsource-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
            },
            product_reference: "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debugsource-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
            },
            product_reference: "libxml2-debugsource-0:2.9.7-8.el8.s390x",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debugsource-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
            },
            product_reference: "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
            },
            product_reference: "libxml2-devel-0:2.9.7-8.el8.aarch64",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
            },
            product_reference: "libxml2-devel-0:2.9.7-8.el8.i686",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
            },
            product_reference: "libxml2-devel-0:2.9.7-8.el8.ppc64le",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
            },
            product_reference: "libxml2-devel-0:2.9.7-8.el8.s390x",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
            },
            product_reference: "libxml2-devel-0:2.9.7-8.el8.x86_64",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
            },
            product_reference: "python3-libxml2-0:2.9.7-8.el8.aarch64",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
            },
            product_reference: "python3-libxml2-0:2.9.7-8.el8.ppc64le",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
            },
            product_reference: "python3-libxml2-0:2.9.7-8.el8.s390x",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
            },
            product_reference: "python3-libxml2-0:2.9.7-8.el8.x86_64",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
            },
            product_reference: "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
            },
            product_reference: "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
            },
            product_reference: "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
            },
            product_reference: "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
            },
            product_reference: "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
            relates_to_product_reference: "AppStream-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
            },
            product_reference: "libxml2-0:2.9.7-8.el8.aarch64",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
            },
            product_reference: "libxml2-0:2.9.7-8.el8.i686",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
            },
            product_reference: "libxml2-0:2.9.7-8.el8.ppc64le",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
            },
            product_reference: "libxml2-0:2.9.7-8.el8.s390x",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-0:2.9.7-8.el8.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
            },
            product_reference: "libxml2-0:2.9.7-8.el8.src",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
            },
            product_reference: "libxml2-0:2.9.7-8.el8.x86_64",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debuginfo-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
            },
            product_reference: "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debuginfo-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
            },
            product_reference: "libxml2-debuginfo-0:2.9.7-8.el8.i686",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
            },
            product_reference: "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debuginfo-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
            },
            product_reference: "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debuginfo-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
            },
            product_reference: "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debugsource-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
            },
            product_reference: "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debugsource-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
            },
            product_reference: "libxml2-debugsource-0:2.9.7-8.el8.i686",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debugsource-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
            },
            product_reference: "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debugsource-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
            },
            product_reference: "libxml2-debugsource-0:2.9.7-8.el8.s390x",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-debugsource-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
            },
            product_reference: "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
            },
            product_reference: "libxml2-devel-0:2.9.7-8.el8.aarch64",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
            },
            product_reference: "libxml2-devel-0:2.9.7-8.el8.i686",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
            },
            product_reference: "libxml2-devel-0:2.9.7-8.el8.ppc64le",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
            },
            product_reference: "libxml2-devel-0:2.9.7-8.el8.s390x",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
            },
            product_reference: "libxml2-devel-0:2.9.7-8.el8.x86_64",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
            },
            product_reference: "python3-libxml2-0:2.9.7-8.el8.aarch64",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
            },
            product_reference: "python3-libxml2-0:2.9.7-8.el8.ppc64le",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
            },
            product_reference: "python3-libxml2-0:2.9.7-8.el8.s390x",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
            },
            product_reference: "python3-libxml2-0:2.9.7-8.el8.x86_64",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
            },
            product_reference: "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
            },
            product_reference: "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
            },
            product_reference: "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
            },
            product_reference: "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
               product_id: "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
            },
            product_reference: "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
            relates_to_product_reference: "BaseOS-8.3.0.GA",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2019-19956",
         cwe: {
            id: "CWE-772",
            name: "Missing Release of Resource after Effective Lifetime",
         },
         discovery_date: "2020-01-08T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1788856",
            },
         ],
         notes: [
            {
               category: "description",
               text: "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
               "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
               "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
               "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
               "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
               "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
               "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
               "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
               "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
               "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
               "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
               "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
               "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
               "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2019-19956",
            },
            {
               category: "external",
               summary: "RHBZ#1788856",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1788856",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2019-19956",
               url: "https://www.cve.org/CVERecord?id=CVE-2019-19956",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2019-19956",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2019-19956",
            },
         ],
         release_date: "2020-01-08T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-11-04T02:12:23+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
               product_ids: [
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:4479",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c",
      },
      {
         cve: "CVE-2019-20388",
         cwe: {
            id: "CWE-401",
            name: "Missing Release of Memory after Effective Lifetime",
         },
         discovery_date: "2020-02-06T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1799734",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
               "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
               "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
               "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
               "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
               "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
               "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
               "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
               "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
               "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
               "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
               "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
               "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
               "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2019-20388",
            },
            {
               category: "external",
               summary: "RHBZ#1799734",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1799734",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2019-20388",
               url: "https://www.cve.org/CVERecord?id=CVE-2019-20388",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2019-20388",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2019-20388",
            },
         ],
         release_date: "2020-01-21T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-11-04T02:12:23+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
               product_ids: [
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:4479",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c",
      },
      {
         cve: "CVE-2020-7595",
         cwe: {
            id: "CWE-835",
            name: "Loop with Unreachable Exit Condition ('Infinite Loop')",
         },
         discovery_date: "2020-02-06T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1799786",
            },
         ],
         notes: [
            {
               category: "description",
               text: "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
               "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
               "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
               "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
               "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
               "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
               "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
               "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
               "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
               "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
               "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
               "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
               "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
               "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
               "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
               "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
               "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
               "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
               "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
               "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
               "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
               "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
               "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-7595",
            },
            {
               category: "external",
               summary: "RHBZ#1799786",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1799786",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-7595",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-7595",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
            },
         ],
         release_date: "2020-01-21T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-11-04T02:12:23+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
               product_ids: [
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:4479",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
                  "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
                  "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
                  "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations",
      },
   ],
}

cve-2019-19956

Vulnerability from cvelistv5

Published

2019-12-24 15:12

Modified

2024-08-05 02:32

Severity ?

Summary

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.

References

▼	URL	Tags
	https://lists.debian.org/debian-lts-announce/2019/12/msg00032.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/4274-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00005.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
	https://gitlab.gnome.org/GNOME/libxml2/commit/5a02583c7e683896d84878bd90641d8d9b0d0549	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200114-0002/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html	mailing-list, x_refsource_MLIST
	https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf	x_refsource_CONFIRM
	https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T02:32:10.073Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[debian-lts-announce] 20191228 [SECURITY] [DLA 2048-1] libxml2 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2019/12/msg00032.html",
               },
               {
                  name: "USN-4274-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4274-1/",
               },
               {
                  name: "FEDORA-2020-0c71c00af4",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/",
               },
               {
                  name: "FEDORA-2020-7694e8be73",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/",
               },
               {
                  name: "openSUSE-SU-2020:0681",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html",
               },
               {
                  name: "openSUSE-SU-2020:0781",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00005.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujul2020.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://gitlab.gnome.org/GNOME/libxml2/commit/5a02583c7e683896d84878bd90641d8d9b0d0549",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200114-0002/",
               },
               {
                  name: "[debian-lts-announce] 20200909 [SECURITY] [DLA 2369-1] libxml2 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-04-15T20:49:14",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[debian-lts-announce] 20191228 [SECURITY] [DLA 2048-1] libxml2 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2019/12/msg00032.html",
            },
            {
               name: "USN-4274-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4274-1/",
            },
            {
               name: "FEDORA-2020-0c71c00af4",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/",
            },
            {
               name: "FEDORA-2020-7694e8be73",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/",
            },
            {
               name: "openSUSE-SU-2020:0681",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html",
            },
            {
               name: "openSUSE-SU-2020:0781",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00005.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujul2020.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.gnome.org/GNOME/libxml2/commit/5a02583c7e683896d84878bd90641d8d9b0d0549",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200114-0002/",
            },
            {
               name: "[debian-lts-announce] 20200909 [SECURITY] [DLA 2369-1] libxml2 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2019-19956",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "[debian-lts-announce] 20191228 [SECURITY] [DLA 2048-1] libxml2 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2019/12/msg00032.html",
                  },
                  {
                     name: "USN-4274-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4274-1/",
                  },
                  {
                     name: "FEDORA-2020-0c71c00af4",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/",
                  },
                  {
                     name: "FEDORA-2020-7694e8be73",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/",
                  },
                  {
                     name: "openSUSE-SU-2020:0681",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0781",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00005.html",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujul2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujul2020.html",
                  },
                  {
                     name: "https://gitlab.gnome.org/GNOME/libxml2/commit/5a02583c7e683896d84878bd90641d8d9b0d0549",
                     refsource: "MISC",
                     url: "https://gitlab.gnome.org/GNOME/libxml2/commit/5a02583c7e683896d84878bd90641d8d9b0d0549",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200114-0002/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200114-0002/",
                  },
                  {
                     name: "[debian-lts-announce] 20200909 [SECURITY] [DLA 2369-1] libxml2 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf",
                  },
                  {
                     name: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08",
                     refsource: "CONFIRM",
                     url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2019-19956",
      datePublished: "2019-12-24T15:12:57",
      dateReserved: "2019-12-24T00:00:00",
      dateUpdated: "2024-08-05T02:32:10.073Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-7595

Vulnerability from cvelistv5

Published

2020-01-21 22:54

Modified

2024-08-04 09:33

Severity ?

Summary

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

References

▼	URL	Tags
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/	vendor-advisory, x_refsource_FEDORA
	https://usn.ubuntu.com/4274-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200702-0005/	x_refsource_CONFIRM
	https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/202010-04	vendor-advisory, x_refsource_GENTOO
	https://www.oracle.com/security-alerts/cpuoct2021.html	x_refsource_MISC
	https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf	x_refsource_CONFIRM
	https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08	x_refsource_CONFIRM
	https://www.oracle.com/security-alerts/cpuapr2022.html	x_refsource_MISC
	https://www.oracle.com/security-alerts/cpujul2022.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:33:19.963Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "FEDORA-2020-41fe1680f6",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/",
               },
               {
                  name: "USN-4274-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4274-1/",
               },
               {
                  name: "FEDORA-2020-0c71c00af4",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/",
               },
               {
                  name: "FEDORA-2020-7694e8be73",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/",
               },
               {
                  name: "openSUSE-SU-2020:0681",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujul2020.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200702-0005/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076",
               },
               {
                  name: "[debian-lts-announce] 20200909 [SECURITY] [DLA 2369-1] libxml2 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html",
               },
               {
                  name: "GLSA-202010-04",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202010-04",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuoct2021.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2022.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujul2022.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-07-25T16:23:35",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "FEDORA-2020-41fe1680f6",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/",
            },
            {
               name: "USN-4274-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4274-1/",
            },
            {
               name: "FEDORA-2020-0c71c00af4",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/",
            },
            {
               name: "FEDORA-2020-7694e8be73",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/",
            },
            {
               name: "openSUSE-SU-2020:0681",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujul2020.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200702-0005/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076",
            },
            {
               name: "[debian-lts-announce] 20200909 [SECURITY] [DLA 2369-1] libxml2 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html",
            },
            {
               name: "GLSA-202010-04",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202010-04",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuoct2021.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2022.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujul2022.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-7595",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "FEDORA-2020-41fe1680f6",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/",
                  },
                  {
                     name: "USN-4274-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4274-1/",
                  },
                  {
                     name: "FEDORA-2020-0c71c00af4",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/",
                  },
                  {
                     name: "FEDORA-2020-7694e8be73",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/",
                  },
                  {
                     name: "openSUSE-SU-2020:0681",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujul2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujul2020.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200702-0005/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200702-0005/",
                  },
                  {
                     name: "https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076",
                     refsource: "MISC",
                     url: "https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076",
                  },
                  {
                     name: "[debian-lts-announce] 20200909 [SECURITY] [DLA 2369-1] libxml2 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html",
                  },
                  {
                     name: "GLSA-202010-04",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202010-04",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuoct2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuoct2021.html",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf",
                  },
                  {
                     name: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08",
                     refsource: "CONFIRM",
                     url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2022.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2022.html",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujul2022.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujul2022.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-7595",
      datePublished: "2020-01-21T22:54:14",
      dateReserved: "2020-01-21T00:00:00",
      dateUpdated: "2024-08-04T09:33:19.963Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-20388

Vulnerability from cvelistv5

Published

2020-01-21 22:53

Modified

2024-08-05 02:39

Severity ?

Summary

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.

References

▼	URL	Tags
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
	https://gitlab.gnome.org/GNOME/libxml2/merge_requests/68	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200702-0005/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/202010-04	vendor-advisory, x_refsource_GENTOO
	https://www.oracle.com/security-alerts/cpuoct2021.html	x_refsource_MISC
	https://www.oracle.com/security-alerts/cpuapr2022.html	x_refsource_MISC
	https://www.oracle.com/security-alerts/cpujul2022.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T02:39:09.814Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "FEDORA-2020-41fe1680f6",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/",
               },
               {
                  name: "FEDORA-2020-0c71c00af4",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/",
               },
               {
                  name: "FEDORA-2020-7694e8be73",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/",
               },
               {
                  name: "openSUSE-SU-2020:0681",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujul2020.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://gitlab.gnome.org/GNOME/libxml2/merge_requests/68",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200702-0005/",
               },
               {
                  name: "[debian-lts-announce] 20200909 [SECURITY] [DLA 2369-1] libxml2 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html",
               },
               {
                  name: "GLSA-202010-04",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202010-04",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuoct2021.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2022.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujul2022.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-07-25T16:12:42",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "FEDORA-2020-41fe1680f6",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/",
            },
            {
               name: "FEDORA-2020-0c71c00af4",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/",
            },
            {
               name: "FEDORA-2020-7694e8be73",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/",
            },
            {
               name: "openSUSE-SU-2020:0681",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujul2020.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.gnome.org/GNOME/libxml2/merge_requests/68",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200702-0005/",
            },
            {
               name: "[debian-lts-announce] 20200909 [SECURITY] [DLA 2369-1] libxml2 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html",
            },
            {
               name: "GLSA-202010-04",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202010-04",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuoct2021.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2022.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujul2022.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2019-20388",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "FEDORA-2020-41fe1680f6",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/",
                  },
                  {
                     name: "FEDORA-2020-0c71c00af4",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/",
                  },
                  {
                     name: "FEDORA-2020-7694e8be73",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/",
                  },
                  {
                     name: "openSUSE-SU-2020:0681",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujul2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujul2020.html",
                  },
                  {
                     name: "https://gitlab.gnome.org/GNOME/libxml2/merge_requests/68",
                     refsource: "MISC",
                     url: "https://gitlab.gnome.org/GNOME/libxml2/merge_requests/68",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200702-0005/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200702-0005/",
                  },
                  {
                     name: "[debian-lts-announce] 20200909 [SECURITY] [DLA 2369-1] libxml2 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html",
                  },
                  {
                     name: "GLSA-202010-04",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202010-04",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuoct2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuoct2021.html",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2022.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2022.html",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujul2022.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujul2022.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2019-20388",
      datePublished: "2020-01-21T22:53:50",
      dateReserved: "2020-01-21T00:00:00",
      dateUpdated: "2024-08-05T02:39:09.814Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

rhsa-2020_4479

Vulnerability from csaf_redhat

cve-2019-19956

Vulnerability from cvelistv5

cve-2020-7595

Vulnerability from cvelistv5

cve-2019-20388

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature