Red Hat Security AdvisoryRHSA-2012:1265
libxslt security update
Released 2012-09-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) libxslt-1.1.17-4.el5_8.3, libxslt-devel-1.1.17-4.el5_8.3, libxslt-devel-1.1.17-4.el5_8.3.i386
- Red Hat Enterprise Linux (v. 5 server) libxslt-1.1.17-4.el5_8.3, libxslt-1.1.17-4.el5_8.3.i386, libxslt-1.1.17-4.el5_8.3.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) libxslt-1.1.17-4.el5_8.3, libxslt-1.1.17-4.el5_8.3.i386, libxslt-python-1.1.17-4.el5_8.3 +1
- Red Hat Enterprise Linux Desktop (v. 6) libxslt-1.1.26-2.el6_3.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-devel-1.1.26-2.el6_3.1, libxslt-python-1.1.26-2.el6_3.1
- Red Hat Enterprise Linux HPC Node (v. 6) libxslt-1.1.26-2.el6_3.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-devel-1.1.26-2.el6_3.1, libxslt-python-1.1.26-2.el6_3.1
- Red Hat Enterprise Linux Server (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-1.1.26-2.el6_3.1.ppc, libxslt-devel-1.1.26-2.el6_3.1 +1
- Red Hat Enterprise Linux Server Optional (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-python-1.1.26-2.el6_3.1
- Red Hat Enterprise Linux Workstation (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-devel-1.1.26-2.el6_3.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-python-1.1.26-2.el6_3.1
Fixes 6 records
Priority LOW 35
libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote attackers to cause a denial…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0238 · Published 2012-08-31 · Fixed
Priority LOW 33
Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XSL transforms.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01478 · Published 2012-09-26 · Fixed CWE-399
Priority LOW 27
The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02196 · Published 2012-06-27 · Partial fix CWE-20
Priority LOW 25
libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service (application crash) via a crafted XSLT expression…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02455 · Published 2012-08-31 · Fixed CWE-399
Priority LOW 25
The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02491 · Published 2011-03-11 · Partial fix CWE-200
Priority LOW 24
libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01751 · Published 2012-02-09 · Partial fix CWE-125
THREATIST.IORead the docs