Lucene search

K
oraclelinuxOracleELSA-2012-1265
HistorySep 13, 2012 - 12:00 a.m.

libxslt security update

2012-09-1300:00:00
Oracle
linux.oracle.com
25

0.019 Low

EPSS

Percentile

88.8%

[1.1.26-2.0.2.el6_3.1]

  • Increment release to avoid ULN conflict with previous release.
    [1.1.26-2.0.1.el6_3.1]
  • Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball
    [1.1.26-2.el6_3.1]
  • fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870
  • Fix direct pattern matching bug
  • Fix popping of vars in xsltCompilerNodePop
  • Fix bug 602515
  • Fix generate-id() to not expose object addresses (CVE-2011-1202)
  • Fix some case of pattern parsing errors (CVE-2011-3970)
  • Fix a bug in selecting XSLT elements (CVE-2012-2825)
  • Fix portability to upcoming libxml2-2.9.0
  • Fix default template processing on namespace nodes (CVE-2012-2871)
  • Cleanup of the pattern compilation code (CVE-2012-2870)
  • Hardening of code checking node types in various entry point (CVE-2012-2870)
  • Hardening of code checking node types in EXSLT (CVE-2012-2870)
  • Fix system-property with unknown namespace
  • Xsltproc should return an error code if xinclude fails
  • Fix a dictionary string usage
  • Avoid a heap use after free error