Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Slackware: 2022-059-02 Moderate: Libxslt Memory Leak Fix

slackware
Calendar Grey March 1, 2022
Dist Slackware Esm H88
Updated libxslt versions have been released for Slackware systems to address critical vulnerabilities promptly.
New libxslt packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues

Summary

Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libxslt-1.1.35-i586-1_slack15.0.txz: Upgraded. This update fixes bugs and the following security issues: Fix use-after-free in xsltApplyTemplates Fix memory leak in xsltDocumentElem (David King) Fix memory leak in xsltCompileIdKeyPattern (David King) Fix double-free with stylesheets containing entity nodes For more information, see: https://www.cve.org/CVERecord?id=CVE-2021-30560 (* Security fix *)

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 14.0: ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/libxslt-1.1.35-i486-1_slack14.0.txz
Updated package for Slackware x86_64 14.0: ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/libxslt-1.1.35-x86_64-1_slack14.0.txz
Updated package for Slackware 14.1: ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/libxslt-1.1.35-i486-1_slack14.1.txz
Updated package for Slackware x86_64 14.1: ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/libxslt-1.1.35-x86_64-1_slack14.1.txz
Updated package for Slackware 14.2: ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/libxslt-1.1.35-i586-1_slack14.2.txz
Updated package for S...

Read the Full Advisory

MD5 Signatures

Slackware 14.0 package: 81cd981ddf3f6fb0d519754c41880388 libxslt-1.1.35-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: d9e0a70a14035f99509b4d99f2c96701 libxslt-1.1.35-x86_64-1_slack14.0.txz
Slackware 14.1 package: 392f009f4998c795a82720dde3b48fae libxslt-1.1.35-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: aa1ee1dde09d78fc4f93da6a18e1c166 libxslt-1.1.35-x86_64-1_slack14.1.txz
Slackware 14.2 package: da0f1d5daac3996b314cd888f726c977 libxslt-1.1.35-i586-1_slack14.2.txz
Slackware x86_64 14.2 package: 52b7ab3de5b33db1573e662714db6e96 libxslt-1.1.35-x86_64-1_slack14.2.txz
Slackware 15.0 package: b19a13a3e5dae095b6c49c097c27e2ba libxslt-1.1.35-i586-1_slack15.0.txz
Slackware x86_64 15.0 package: 675df1f60d69e6b3713691381fc78ac4 libxslt-1.1.35-x86_64-1_slack15.0.txz
Slackware -current package: c88bbbaa9bf32af14bb5b7259e08fa40 l/libxslt-1.1.35-i586-1.txz
Slackware x86_64 -current package: 10c75c8ae4c68294be1af698993e405f l/libxslt-1.1.35-x86_64-1.txz

Severity
important
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg libxslt-1.1.35-i586-1_slack15.0.txz

Related News

Your message here