|CVE-2017-8872 CVE-2019-20388 CVE-2020-7595 CVE-2020-24977
Several security vulnerabilities were corrected in libxml2, the GNOME XML library.
Global buffer-overflow in the htmlParseTryOrFinish function.
A memory leak was found in the xmlSchemaValidateStream function of libxml2.
Applications that use this library may be vulnerable to memory not being
freed leading to a denial of service.
Out-of-bounds read restricted to xmllint --htmlout.
Infinite loop in xmlStringLenDecodeEntities can cause a denial of service.
For Debian 8 jessie, these problems have been fixed in version 2.9.1+dfsg1-5+deb8u9.
We recommend that you upgrade your libxml2 packages.
Further information about Extended LTS security advisories can be found in the dedicated section of our website.