A security vulnerability was discovered in libxslt, a XSLT 1.0 processing library written in C. In xsltCopyText in transform.c, a pointer variable is not reset under . Package : libxslt Version : 1.1.28-2+deb8u6 CVE ID : CVE-2019-18197 Debian Bug : 942646 A security vulnerability was discovered in libxslt, a XSLT 1.0 processing library written in C. In xsltCopyText in transform.c, a pointer variable is not reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed. For Debian 8 "Jessie", this problem has been fixed in version 1.1.28-2+deb8u6. We recommend that you upgrade your libxslt packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Update libxslt in Debian 8 to mitigate memory disclosure vulnerabilities by ensuring your system is updated and installing the necessary package version. libxslt security, Debian updates, memory disclosure, open-source library, processing vulnerabilities. . Severity: Critical. LinuxSecurity.com Team
It was discovered that incomplete validation in a Phar processing library embedded in Drupal, a fully-featured content management framework, could result in information disclosure. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4445-1
Get the latest Linux and open source security news straight to your inbox.