Open mend-for-github-com[bot] opened 3 years ago
git://git.savannah.gnu.org/gettext.git
Library home page: https://github.com/autotools-mirror/gettext.git
Found in HEAD commit: ebbe518de6103063656cb8a1c3d1040aacb09826
Found in base branch: main
dvna/node_modules/libxmljs/vendor/libxml/xmlschemastypes.c
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
Publish Date: 2020-09-04
URL: CVE-2020-24977
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: Low
Type: Upgrade version
Origin: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NQ5GTDYOVH26PBCPYXXMGW5ZZXWMGZC/
Release Date: 2020-09-04
Fix Resolution: 2.9.10-7
CVE-2020-24977 - Medium Severity Vulnerability
git://git.savannah.gnu.org/gettext.git
Library home page: https://github.com/autotools-mirror/gettext.git
Found in HEAD commit: ebbe518de6103063656cb8a1c3d1040aacb09826
Found in base branch: main
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
Publish Date: 2020-09-04
URL: CVE-2020-24977
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: Low
For more information on CVSS3 Scores, click here.Type: Upgrade version
Origin: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NQ5GTDYOVH26PBCPYXXMGW5ZZXWMGZC/
Release Date: 2020-09-04
Fix Resolution: 2.9.10-7