REDHAT-BUG-1799734: Medium severity Gnome libxml2 vulnerability
xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.
Reference and upstream commit: https://gitlab.gnome.org/GNOME/libxml2/mergerequests/68
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1799734?
The severity of REDHAT-BUG-1799734 is categorized as medium due to the potential memory leak in the libxml2 library.
How do I fix REDHAT-BUG-1799734?
To fix REDHAT-BUG-1799734, it is recommended to update to a version of libxml2 that includes the upstream commit addressing the memory leak.
What software is affected by REDHAT-BUG-1799734?
REDHAT-BUG-1799734 affects the libxml2 library specifically in versions prior to the fix implemented after the reported vulnerability.
What is the nature of the vulnerability in REDHAT-BUG-1799734?
The nature of the vulnerability in REDHAT-BUG-1799734 is a memory leak resulting from the function xmlSchemaPreRun within the libxml2 library.
Is there a workaround for REDHAT-BUG-1799734?
Currently, the recommended approach for REDHAT-BUG-1799734 is to apply the available fix rather than relying on workarounds, as they may not fully mitigate the vulnerability.