Package "libxslt"

Name: libxslt


This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Python bindings for libxslt1
  • Python bindings for libxslt1 (debug extension)

Latest version: 1.1.32-2ubuntu0.2
Release: disco (19.04)
Level: security
Repository: universe


Save this URL for the latest version of "libxslt": https://www.ubuntuupdates.org/libxslt

Other versions of "libxslt" in Disco

Repository Area Version
base universe 1.1.32-2ubuntu0.1
base main 1.1.32-2ubuntu0.1
security main 1.1.32-2ubuntu0.2
updates universe 1.1.32-2ubuntu0.2
updates main 1.1.32-2ubuntu0.2

Packages in group

Deleted packages are displayed in grey.


Version: 1.1.32-2ubuntu0.2 2019-10-22 18:07:13 UTC

  libxslt (1.1.32-2ubuntu0.2) disco-security; urgency=medium

  * SECURITY UPDATE: Uninitialized read
    - debian/patches/CVE-2019-13117.patch: Fix uninitialized
      read of xsl:number token in libxslt/numbers.c.
    - CVE-2019-13117
  * SECURITY UPDATE: Uninitialized read
    - debian/patches/CVE-2019-13118.patch: Fix uninitialized
      read with UTF-8 grouping chars in libxslt/numbers.c,
      tests/docs/bug-222.xml, tests/general/bug-222.out,
    - CVE-2019-13118
  * SECURITY UPDATE: Buffer over-read
    - debian/patches/CVE-2019-18197.patch: Fix dangling
      pointer in xsltCopyText in libxslt/transform.c.
    - CVE-2019-18197

 -- <email address hidden> (Leonidas S. Barbosa) Tue, 22 Oct 2019 09:40:11 -0300

CVE-2019-13117 In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This c
CVE-2019-13118 In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combin
CVE-2019-18197 In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to

About   -   Send Feedback to @ubuntu_updates