ALT-PU-2019-2688: package libxslt update to version 1.1.33-alt2
Источник
errata.altlinux.org
Дата публикации
13.09.2019
Дата обновления
04.02.2026
Устраненные уязвимости
6
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container
Описание
This update upgrades libxslt to version 1.1.33-alt2.
Устраненные уязвимости6
Ссылки4
GHSA-4hm9-844j-jmxp
https://github.com/advisories/GHSA-4hm9-844j-jmxpGHSA-cf46-6xxh-pc75
https://github.com/advisories/GHSA-cf46-6xxh-pc75GHSA-qxcg-xjjg-66mj
https://github.com/advisories/GHSA-qxcg-xjjg-66mjСвязанные уязвимости
CVSS3: 9.8
ubuntu
больше 7 лет назад
libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.
CVSS3: 6.3
redhat
больше 7 лет назад
libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.