Red Hat Security AdvisoryRHSA-2008:0649
libxslt security update
Released 2008-07-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) libxslt-1.1.17-2.el5_2.2, libxslt-1.1.17-2.el5_2.2.i386, libxslt-1.1.17-2.el5_2.2.ia64 +9
- Red Hat Enterprise Linux AS version 4 libxslt-1.1.11-1.el4_7.2, libxslt-1.1.11-1.el4_7.2.i386, libxslt-1.1.11-1.el4_7.2.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) libxslt-1.1.17-2.el5_2.2, libxslt-1.1.17-2.el5_2.2.i386, libxslt-python-1.1.17-2.el5_2.2 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libxslt-1.1.17-2.el5_2.2, libxslt-devel-1.1.17-2.el5_2.2, libxslt-devel-1.1.17-2.el5_2.2.i386
- Red Hat Enterprise Linux Desktop version 4 libxslt-1.1.11-1.el4_7.2, libxslt-1.1.11-1.el4_7.2.i386, libxslt-devel-1.1.11-1.el4_7.2 +3
- Red Hat Enterprise Linux ES version 4 libxslt-1.1.11-1.el4_7.2, libxslt-1.1.11-1.el4_7.2.i386, libxslt-1.1.11-1.el4_7.2.ia64 +6
- Red Hat Enterprise Linux WS version 4 libxslt-1.1.11-1.el4_7.2, libxslt-1.1.11-1.el4_7.2.i386, libxslt-1.1.11-1.el4_7.2.ia64 +6
Fixes 1 record
Priority MEDIUM 47
Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFunction) functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.12789 · Published 2008-08-01 · Fixed CWE-119
