Several use-after-free vulnerabilities have been found in libxslt.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/libxslt | * | < 1.1.35 | >= 1.1.35 |
libxslt is the XSLT C library developed for the GNOME project. XSLT itself is an XML language to define transformations for XML.
Multiple vulnerabilities have been discovered in libxslt. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All libxslt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/libxslt-1.1.35"
Multiple vulnerabilities were discovered in libxslt, the worst of which may allow a remote attacker to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/libxslt | * | < 1.1.30 | >= 1.1.30 |
libxslt is the XSLT C library developed for the GNOME project. XSLT is an XML language to define transformations for XML.
Multiple vulnerabilities have been discovered in libxslt. Please review the CVE identifiers referenced below for details.
A remote attacker, via a crafted HTML page, could possibly execute arbitrary code, cause a Denial of Service condition or leak information.
There is no known workaround at this time.
All libxslt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/libxslt-1.1.30"
Multiple Denial of Service vulnerabilities have been found in libxslt.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/libxslt | * | < 1.1.28 | >= 1.1.28 |
libxslt is the XSLT C library developed for the GNOME project. XSLT is an XML language to define transformations for XML.
Multiple vulnerabilities have been found in libxslt:
A remote attacker could entice a user to process a specially crafted file in an application linked against libxslt, possibly resulting in a Denial of Service condition.
There is no known workaround at this time.
All libxslt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/libxslt-1.1.28"
Packages which depend on this library may need to be recompiled. Tools such as revdep-rebuild may assist in identifying some of these packages.
A vulnerability in libxslt could result in Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/libxslt | * | < 1.1.26-r3 | >= 1.1.26-r3 |
libxslt is the XSLT C library developed for the GNOME project. XSLT is an XML language to define transformations for XML.
An out of bounds read error has been found in libxslt/pattern.c in libxslt.
A remote attacker could entice a user to process an XML file using a specially crafted XSLT stylesheet in an application linked against libxslt, possibly resulting in a Denial of Service condition.
There is no known workaround at this time.
All libxslt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/libxslt-1.1.26-r3"
libxslt is affected by a heap-based buffer overflow, possibly leading to the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/libxslt | * | < 1.1.24-r1 | >= 1.1.24-r1, < 1.1.8 |
libxslt is the XSLT C library developed for the GNOME project. XSLT is an XML language to define transformations for XML.
Chris Evans (Google Security) reported that the libexslt library that is part of libxslt is affected by a heap-based buffer overflow in the RC4 encryption/decryption functions.
A remote attacker could entice a user to process an XML file using a specially crafted XSLT stylesheet in an application linked against libxslt, possibly leading to the execution of arbitrary code with the privileges of the user running the application.
There is no known workaround at this time.
All libxslt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/libxslt-1.1.24-r1"
A vulnerability was found in libxslt, possibly resulting in the execution of arbitrary code and Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/libxslt | * | < 1.1.24 | >= 1.1.24 |
Libxslt is the XSLT C library developed for the GNOME project. XSLT itself is an XML language to define transformations for XML.
Anthony de Almeida Lopes reported a vulnerability in libxslt when handling XSL style-sheet files, which could be exploited to trigger the use of uninitialized memory, e.g. in a call to "free()".
A remote attacker could entice a user or automated system to process an XML file using a specially crafted XSL transformation file, possibly resulting in the execution of arbitrary code or a Denial of Service.
There is no known workaround at this time.
All libxslt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/libxslt-1.1.24"