This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-24977 →

DEBIAN-CVE-2020-24977

GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed...

Original description

The description as published by the source.

GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 libxml2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-6.2"}]}]

Debian:13 libxml2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-6.2"}]}]

Debian:14 libxml2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-6.2"}]}]

References

advisory security-tracker.debian.org