SUSE-SU-2019:1221-1 Security update for libxslt

This update for libxslt fixes the following issues: Security issue fixed: - CVE-2019-11068: Fixed a protection mechanism bypass where callers of xsltCheckRead and xsltCheckWrite would permit access upon receiving an error bsc1132160...

Denial Of Service (DoS)

libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the underlying data using the standard XSLT stylesheet transformation mechanism. A heap-based buffer overflow flaw was found in the way libxslt applied templates...

Denial Of Service (DoS)

libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the underlying data using the standard XSLT stylesheet transformation mechanism. A heap-based buffer overflow flaw was found in the way libxslt applied templates...

Denial Of Service (DoS)

libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the underlying data using the standard XSLT stylesheet transformation mechanism. A heap-based buffer overflow flaw was found in the way libxslt applied templates...

Denial Of Service (DoS)

libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the underlying data using the standard XSLT stylesheet transformation mechanism. A heap-based buffer overflow flaw was found in the way libxslt applied templates...

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. It was discovered that the PHP XSL extension did not restrict the file writing capability of libxslt. A remote attacker could use this flaw to create or overwrite an arbitrary file that is writable by the user...

Arbitrary Code Execution

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. It was discovered that the PHP XSL extension did not restrict the file writing capability of libxslt. A remote attacker could use this flaw to create or overwrite an arbitrary file that is writable by the user...

EulerOS 2.0 SP2 : libxslt (EulerOS-SA-2019-1317)

According to the version of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receivi...

EulerOS 2.0 SP5 : libxslt (EulerOS-SA-2019-1318)

According to the versions of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon...

libxslt/xslt: Use-of-uninitialized-value in xsltNumberFormatInsertNumbers

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed report: https://oss-fuzz.com/testcase?key=5631739747106816 Project: libxslt Fuzzer: libFuzzerlibxsltxslt Fuzz target binary: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

CVE-2019-5815

Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data...

USN-3947-1: Libxslt vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that Libxslt incorrectly handled certain documents. An attacker could possibly use this issue to access sensitive information. CVEs containe...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0152

An update of 'gnutls', 'libxslt', 'mysql', 'ansible', 'dhcp' packages of Photon OS has been released...

Critical Photon OS Security Update - PHSA-2019-0152

Updates of 'mysql', 'ansible', 'dhcp', 'libxslt', 'gnutls' packages of Photon OS have been released...

Nokogiri gem, via libxslt, is affected by improper access control vulnerability

Nokogiri v1.10.3 has been released. This is a security release. It addresses a CVE in upstream libxslt rated as "Priority: medium" by Canonical, and "NVD Severity: high" by Debian. More details are available below. If you're using your distro's system libraries, rather than Nokogiri's vendored...

Critical Photon OS Security Update - PHSA-2019-0224

Updates of 'PyYAML', 'linux', 'gnutls', 'libxslt', 'linux-esx' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2019-0010

Updates of 'postgresql', 'haproxy', 'ansible', 'libxslt', 'PyYAML' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2019-3.0-0010

Updates of 'haproxy', 'postgresql', 'ansible', 'PyYAML', 'libxslt' packages of Photon OS have been released...

libxslt/xslt: Index-out-of-bounds in xsltSetAttrVTsegment

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed report: https://oss-fuzz.com/testcase?key=5954139823013888 Project: libxslt Fuzzer: libFuzzerlibxsltxslt Fuzz target binary: xslt Job Type: libfuzzerubsanlibxslt Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

Debian: Security Advisory (DLA-1756-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...