libxslt 1.1.26-6ubuntu0.1 source package in Ubuntu

Changelog

libxslt (1.1.26-6ubuntu0.1) natty-security; urgency=low

  * SECURITY UPDATE: information disclosure via generate-id XPath function
    - libxslt/functions.c: do not expose object addresses directly.
    - ecb6bcb8d1b7e44842edde3929f412d46b40c89f
    - CVE-2011-1202
  * SECURITY UPDATE: denial of service via out-of-bounds read
    - libxslt/pattern.c: fix improper loop exit.
    - fe5a4fa33eb85bce3253ed3742b1ea6c4b59b41b
    - CVE-2011-3970
  * SECURITY UPDATE: denial of service via out-of-bounds read
    - libxslt/xsltutils.h: check for XML_ELEMENT_NODE
    - e6a0bc8081271f33b9899eb78e1da1a2a0428419
    - CVE-2012-2825
  * SECURITY UPDATE: denial of service via crafted XSLT expression
    - harden code in libexslt/functions.c, libxslt/attributes.c,
      libxslt/functions.c, libxslt/pattern.c, libxslt/preproc.c,
      libxslt/templates.c, libxslt/transform.c, libxslt/variables.c,
      libxslt/xslt.c, libxslt/xsltutils.c.
    - 8566ab4a10158d195adb5f1f61afe1ee8bfebd12
    - 4da0f7e207f14a03daad4663865c285eb27f93e9
    - 24653072221e76d2f1f06aa71225229b532f8946
    - 1564b30e994602a95863d9716be83612580a2fed
    - CVE-2012-2870
  * SECURITY UPDATE: denial of service and possible code execution during
    handling of XSL transforms
    - libxslt/transform.c: check for XML_NAMESPACE_DECL
    - 937ba2a3eb42d288f53c8adc211bd1122869f0bf
    - CVE-2012-2871
  * SECURITY UPDATE: denial of service and possible code execution via
    double free during XSL transforms
    - libxslt/templates.c: Fix dictionary string usage
    - 54977ed7966847e305a2008cb18892df26eeb065
    - CVE-2012-2893
 -- Marc Deslauriers <email address hidden>   Fri, 28 Sep 2012 15:25:53 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Natty
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
text
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libxslt_1.1.26.orig.tar.gz 3.2 MiB 55dd52b42861f8a02989d701ef716d6280bfa02971e967c285016f99c66e3db1
libxslt_1.1.26-6ubuntu0.1.diff.gz 95.1 KiB 197d52cfb9da8aaddf28d70b0d1f860cbe3bfd8b4468c075990d3419238dd966
libxslt_1.1.26-6ubuntu0.1.dsc 2.1 KiB 43e8bb8ff28a2558c218f7313044574c87bb62abf06be659f924f64e6ad09c1b

View changes file

Binary packages built by this source

libxslt1-dbg: No summary available for libxslt1-dbg in ubuntu natty.

No description available for libxslt1-dbg in ubuntu natty.

libxslt1-dev: No summary available for libxslt1-dev in ubuntu natty.

No description available for libxslt1-dev in ubuntu natty.

libxslt1.1: No summary available for libxslt1.1 in ubuntu natty.

No description available for libxslt1.1 in ubuntu natty.

python-libxslt1: No summary available for python-libxslt1 in ubuntu natty.

No description available for python-libxslt1 in ubuntu natty.

python-libxslt1-dbg: No summary available for python-libxslt1-dbg in ubuntu natty.

No description available for python-libxslt1-dbg in ubuntu natty.

xsltproc: No summary available for xsltproc in ubuntu natty.

No description available for xsltproc in ubuntu natty.