Stay Secure with the Latest Linux Advisories

security advisorycriticalDebian

Debian 8 DLA-1973-1 Critical: libxslt Memory Disclosure

A security vulnerability was discovered in libxslt, a XSLT 1.0 processing library written in C. In xsltCopyText in transform.c, a pointer variable is not reset under . Package : libxslt Version : 1.1.28-2+deb8u6 CVE ID : CVE-2019-18197 Debian Bug : 942646 A security vulnerability was discovered in libxslt, a XSLT 1.0 processing library written in C. In xsltCopyText in transform.c, a pointer variable is not reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed. For Debian 8 "Jessie", this problem has been fixed in version 1.1.28-2+deb8u6. We recommend that you upgrade your libxslt packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Update libxslt in Debian 8 to mitigate memory disclosure vulnerabilities by ensuring your system is updated and installing the necessary package version. libxslt security, Debian updates, memory disclosure, open-source library, processing vulnerabilities. . Severity: Critical. LinuxSecurity.com Team

Oct 27, 2019 •Critical Debian LTS