shield
Security update for libxslt
sdksp4-libxslt-13104
This update for libxslt fixes the following issues: - CVE-2017-5029: The xsltAddTextString function in transform.c lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page (bsc#1035905). - CVE-2016-4738: Fix heap overread in xsltFormatNumberConversion: An empty decimal-separator could cause a heap overread. This can be exploited to leak a couple of bytes after the buffer that holds the pattern string (bsc#1005591). - CVE-2015-9019: Properly initialize random generator (bsc#934119). - CVE-2015-7995: Vulnerability in function xsltStylePreCompute" in preproc.c could cause a type confusion leading to DoS. (bsc#952474)
-
Release DateMay 15 2017
-
ReferencesBugzilla: 1005591, 952474, 934119, 1035905
CVEs: CVE-2015-9019, CVE-2017-5029, CVE-2015-7995, CVE-2016-4738 -
Typesecurity
-
Severitymoderate
cloud_download Downloads
SUSE Linux Enterprise Software Development Kit 11.4 unknown
-
Packageslibxslt
XSL Transformation Librarylibxslt-devel1.1.24-19.33.1 lock src
Include Files and Libraries mandatory for Developmentlibxslt-devel-32bit1.1.24-19.33.1 lock rpm
Include Files and Libraries mandatory for Developmentlibxslt-python1.1.24-19.33.1 lock rpm
Python Bindings for libxslt1.1.24-19.33.3 lock rpm lock src
SUSE Linux Enterprise Software Development Kit 11.4 unknown
-
Packageslibxslt
XSL Transformation Librarylibxslt-devel1.1.24-19.33.1 lock src
Include Files and Libraries mandatory for Developmentlibxslt-python1.1.24-19.33.1 lock rpm
Python Bindings for libxslt1.1.24-19.33.3 lock rpm lock src
SUSE Linux Enterprise Software Development Kit 11.4 unknown
-
Packageslibxslt
XSL Transformation Librarylibxslt-devel1.1.24-19.33.1 lock src
Include Files and Libraries mandatory for Developmentlibxslt-python1.1.24-19.33.1 lock rpm
Python Bindings for libxslt1.1.24-19.33.3 lock rpm lock src
SUSE Linux Enterprise Software Development Kit 11.4 unknown
-
Packageslibxslt
XSL Transformation Librarylibxslt-devel1.1.24-19.33.1 lock src
Include Files and Libraries mandatory for Developmentlibxslt-devel-32bit1.1.24-19.33.1 lock rpm
Include Files and Libraries mandatory for Developmentlibxslt-python1.1.24-19.33.1 lock rpm
Python Bindings for libxslt1.1.24-19.33.3 lock rpm lock src
SUSE Linux Enterprise Software Development Kit 11.4 unknown
-
Packageslibxslt
XSL Transformation Librarylibxslt-devel1.1.24-19.33.1 lock src
Include Files and Libraries mandatory for Developmentlibxslt-devel-32bit1.1.24-19.33.1 lock rpm
Include Files and Libraries mandatory for Developmentlibxslt-python1.1.24-19.33.1 lock rpm
Python Bindings for libxslt1.1.24-19.33.3 lock rpm lock src