Red Hat Security AdvisoryRHSA-2008:0287
libxslt security update
Released 2008-05-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 libxslt-1.0.33-6, libxslt-1.0.33-6.i386, libxslt-devel-1.0.33-6 +1
- Red Hat Enterprise Linux (v. 5 server) libxslt-1.1.17-2.el5_1.1, libxslt-1.1.17-2.el5_1.1.i386, libxslt-1.1.17-2.el5_1.1.ia64 +9
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 libxslt-1.0.15-3, libxslt-1.0.15-3.i386, libxslt-1.0.15-3.ia64 +4
- Red Hat Enterprise Linux AS version 3 libxslt-1.0.33-6, libxslt-1.0.33-6.i386, libxslt-1.0.33-6.ia64 +5
- Red Hat Enterprise Linux AS version 4 libxslt-1.1.11-1.el4_6.1, libxslt-1.1.11-1.el4_6.1.i386, libxslt-1.1.11-1.el4_6.1.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) libxslt-1.1.17-2.el5_1.1, libxslt-1.1.17-2.el5_1.1.i386, libxslt-python-1.1.17-2.el5_1.1 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libxslt-1.1.17-2.el5_1.1, libxslt-devel-1.1.17-2.el5_1.1, libxslt-devel-1.1.17-2.el5_1.1.i386
- Red Hat Enterprise Linux Desktop version 4 libxslt-1.1.11-1.el4_6.1, libxslt-1.1.11-1.el4_6.1.i386, libxslt-devel-1.1.11-1.el4_6.1 +3
- Red Hat Enterprise Linux ES version 2.1 libxslt-1.0.15-3, libxslt-1.0.15-3.i386, libxslt-devel-1.0.15-3.i386 +1
- Red Hat Enterprise Linux ES version 3 libxslt-1.0.33-6, libxslt-1.0.33-6.i386, libxslt-1.0.33-6.ia64 +3
- Red Hat Enterprise Linux ES version 4 libxslt-1.1.11-1.el4_6.1, libxslt-1.1.11-1.el4_6.1.i386, libxslt-1.1.11-1.el4_6.1.ia64 +6
- Red Hat Enterprise Linux WS version 2.1 libxslt-1.0.15-3, libxslt-1.0.15-3.i386, libxslt-devel-1.0.15-3.i386 +1
- Red Hat Enterprise Linux WS version 3 libxslt-1.0.33-6, libxslt-1.0.33-6.i386, libxslt-1.0.33-6.ia64 +3
- Red Hat Enterprise Linux WS version 4 libxslt-1.1.11-1.el4_6.1, libxslt-1.1.11-1.el4_6.1.i386, libxslt-1.1.11-1.el4_6.1.ia64 +6
- Red Hat Linux Advanced Workstation 2.1 libxslt-1.0.15-3, libxslt-1.0.15-3.ia64, libxslt-devel-1.0.15-3.ia64 +1
Fixes 1 record
Priority MEDIUM 47
Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformati…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.1279 · Published 2008-05-23 · Fixed CWE-119
