About the security content of tvOS 12.4 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

About the security content of watchOS 5.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

SUSE SLED15 / SLES15 Security Update : libxslt (SUSE-SU-2020:1409-1)

This update for libxslt fixes the following issues : Security issues fixed : CVE-2019-13118: Fixed a read of uninitialized stack data bsc1140101. CVE-2019-13117: Fixed a uninitialized read which allowed to discern whether a byte on the stack contains certain special characters bsc1140095...

EulerOS 2.0 SP2 : libxslt (EulerOS-SA-2020-1659)

According to the version of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafte...

Huawei EulerOS: Security Advisory for libxslt (EulerOS-SA-2020-1659)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for libxslt (openSUSE-SU-2020:0731-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : libxslt (openSUSE-2020-731)

This update for libxslt fixes the following issues : Security issues fixed : - CVE-2019-13118: Fixed a read of uninitialized stack data bsc1140101. - CVE-2019-13117: Fixed a uninitialized read which allowed to discern whether a byte on the stack contains certain special characters bsc1140095. -...

OPENSUSE-SU-2020:0731-1 Security update for libxslt

This update for libxslt fixes the following issues: Security issues fixed: - CVE-2019-13118: Fixed a read of uninitialized stack data bsc1140101. - CVE-2019-13117: Fixed a uninitialized read which allowed to discern whether a byte on the stack contains certain special characters bsc1140095. -...

Security update for libxslt (moderate)

openSUSE Security Update: Security update for libxslt Announcement ID: openSUSE-SU-2020:0731-1 Rating: moderate References: 1140095 1140101 1154609 Cross-References: CVE-2019-13117 CVE-2019-13118 CVE-2019-18197 Affected Products: openSUSE Leap 15.1 An update that fixes three vulnerabilities is no...

SUSE-SU-2020:1409-1 Security update for libxslt

This update for libxslt fixes the following issues: Security issues fixed: - CVE-2019-13118: Fixed a read of uninitialized stack data bsc1140101. - CVE-2019-13117: Fixed a uninitialized read which allowed to discern whether a byte on the stack contains certain special characters bsc1140095. -...

EulerOS Virtualization for ARM 64 3.0.2.0 : libxslt (EulerOS-SA-2020-1554)

According to the version of the libxslt packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit...

Huawei EulerOS: Security Advisory for libxslt (EulerOS-SA-2020-1554)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Java SE 1.7.0_261 / 1.8.0_251 / 1.11.0_7 / 1.14.0_1 Multiple Vulnerabilities (Apr 2020 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 7 Update 261, 8 Update 251, 11 Update 7, or 14 Update 1. It is, therefore, affected by multiple vulnerabilities related to the following components : - Oracle Java SE and Java SE Embedded are...

Huawei EulerOS: Security Advisory for libxslt (EulerOS-SA-2020-1409)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libxslt (EulerOS-SA-2020-1442)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : libxslt (EulerOS-SA-2020-1409)

According to the version of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafte...

EulerOS Virtualization 3.0.2.2 : libxslt (EulerOS-SA-2020-1442)

According to the versions of the libxslt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid...

The vulnerability of the xsltNumberFormatGetMultipleLevel function in the XML analysis library libxslt, related to access to resources through incompatible types, allows a attacker to cause a service failure.

The vulnerability of the xsltNumberFormatGetMultipleLevel function in the XML analysis library libxslt is related to access to resources through incompatible types. Exploiting this vulnerability allows an attacker to cause a service failure...

CVE-2019-11068

libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded. Mitigation This flaw only...

The vulnerability of the xsltCopyText function (transform.c) in the libxslt library allows a hacker to execute arbitrary code.

The vulnerability of the xsltCopyText function in the transform.c library is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...