[SECURITY] [DLA 3101-1] libxslt security update

2022-09-0913:08:41

lists.debian.org

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.0%

JSON

Debian LTS Advisory DLA-3101-1 [email protected]
https://www.debian.org/lts/security/ Emilio Pozuelo Monfort
September 09, 2022 https://wiki.debian.org/LTS

Package : libxslt
Version : 1.1.32-2.2~deb10u2
CVE ID : CVE-2019-5815 CVE-2021-30560

Two vulnerabilities were discovered in libxslt, an XSLT processing
runtime library, that could result in denial of service or potentially
the execution of arbitrary code if malicious files are processed.

For Debian 10 buster, these problems have been fixed in version
1.1.32-2.2~deb10u2.

We recommend that you upgrade your libxslt packages.

For the detailed security status of libxslt please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libxslt

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian11amd64xsltproc< 1.1.34-4+deb11u1xsltproc_1.1.34-4+deb11u1_amd64.deb
Debian11armellibxslt1.1-dbgsym< 1.1.34-4+deb11u1libxslt1.1-dbgsym_1.1.34-4+deb11u1_armel.deb
Debian11amd64libxslt1.1-dbgsym< 1.1.34-4+deb11u1libxslt1.1-dbgsym_1.1.34-4+deb11u1_amd64.deb
Debian11s390xlibxslt1.1-dbgsym< 1.1.34-4+deb11u1libxslt1.1-dbgsym_1.1.34-4+deb11u1_s390x.deb
Debian11amd64xsltproc-dbgsym< 1.1.34-4+deb11u1xsltproc-dbgsym_1.1.34-4+deb11u1_amd64.deb
Debian10armhfpython-libxslt1< 1.1.32-2.2~deb10u2python-libxslt1_1.1.32-2.2~deb10u2_armhf.deb
Debian10arm64xsltproc< 1.1.32-2.2~deb10u2xsltproc_1.1.32-2.2~deb10u2_arm64.deb
Debian11ppc64elxsltproc< 1.1.34-4+deb11u1xsltproc_1.1.34-4+deb11u1_ppc64el.deb
Debian11s390xxsltproc< 1.1.34-4+deb11u1xsltproc_1.1.34-4+deb11u1_s390x.deb
Debian11amd64libxslt1.1< 1.1.34-4+deb11u1libxslt1.1_1.1.34-4+deb11u1_amd64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	11	amd64	xsltproc	< 1.1.34-4+deb11u1	xsltproc_1.1.34-4+deb11u1_amd64.deb
Debian	11	armel	libxslt1.1-dbgsym	< 1.1.34-4+deb11u1	libxslt1.1-dbgsym_1.1.34-4+deb11u1_armel.deb
Debian	11	amd64	libxslt1.1-dbgsym	< 1.1.34-4+deb11u1	libxslt1.1-dbgsym_1.1.34-4+deb11u1_amd64.deb
Debian	11	s390x	libxslt1.1-dbgsym	< 1.1.34-4+deb11u1	libxslt1.1-dbgsym_1.1.34-4+deb11u1_s390x.deb
Debian	11	amd64	xsltproc-dbgsym	< 1.1.34-4+deb11u1	xsltproc-dbgsym_1.1.34-4+deb11u1_amd64.deb
Debian	10	armhf	python-libxslt1	< 1.1.32-2.2~deb10u2	python-libxslt1_1.1.32-2.2~deb10u2_armhf.deb
Debian	10	arm64	xsltproc	< 1.1.32-2.2~deb10u2	xsltproc_1.1.32-2.2~deb10u2_arm64.deb
Debian	11	ppc64el	xsltproc	< 1.1.34-4+deb11u1	xsltproc_1.1.34-4+deb11u1_ppc64el.deb
Debian	11	s390x	xsltproc	< 1.1.34-4+deb11u1	xsltproc_1.1.34-4+deb11u1_s390x.deb
Debian	11	amd64	libxslt1.1	< 1.1.34-4+deb11u1	libxslt1.1_1.1.34-4+deb11u1_amd64.deb