< back to search

shield Security update for libxslt
SUSE-SLE-SERVER-12-SP1-2017-793

This update for libxslt fixes the following issues: - CVE-2017-5029: The xsltAddTextString function in transform.c lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page (bsc#1035905). - CVE-2016-4738: Fix heap overread in xsltFormatNumberConversion: An empty decimal-separator could cause a heap overread. This can be exploited to leak a couple of bytes after the buffer that holds the pattern string (bsc#1005591). - CVE-2015-9019: Properly initialize random generator (bsc#934119). - CVE-2015-7995: Vulnerability in function xsltStylePreCompute" in preproc.c could cause a type confusion leading to DoS. (bsc#952474)

cloud_download Downloads

SUSE Linux Enterprise Server 12.1 s390x
  • Packages
    libxslt
    XSL Transformation Library
    1.1.28-16.1 lock src
    libxslt-tools
    Extended Stylesheet Language (XSL) Transformation utilities
    1.1.28-16.1 lock rpm
    libxslt1
    XSL Transformation Library
    1.1.28-16.1 lock rpm
    libxslt1-32bit
    XSL Transformation Library
    1.1.28-16.1 lock rpm
SUSE Linux Enterprise Server 12.1 ppc64le
  • Packages
    libxslt
    XSL Transformation Library
    1.1.28-16.1 lock src
    libxslt-tools
    Extended Stylesheet Language (XSL) Transformation utilities
    1.1.28-16.1 lock rpm
    libxslt1
    XSL Transformation Library
    1.1.28-16.1 lock rpm
SUSE Linux Enterprise Server for SAP Applications 12.1 x86_64
  • Packages
    libxslt
    XSL Transformation Library
    1.1.28-16.1 lock src
    libxslt-tools
    Extended Stylesheet Language (XSL) Transformation utilities
    1.1.28-16.1 lock rpm
    libxslt1
    XSL Transformation Library
    1.1.28-16.1 lock rpm
    libxslt1-32bit
    XSL Transformation Library
    1.1.28-16.1 lock rpm