Risks
Advisories
Browse
or
or
Ubuntu Security Notice - libxslt vulnerability (USN-1784-1)
==========================================================================
Ubuntu Security Notice USN-1784-1
April 02, 2013

libxslt vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.10
- Ubuntu 12.04 LTS
- Ubuntu 11.10
- Ubuntu 10.04 LTS
- Ubuntu 8.04 LTS

Summary:

Applications using libxslt could be made to crash if they processed a
specially crafted file.

Software Description:
- libxslt: XSLT processing library

Details:

Nicholas Gregoire discovered that libxslt incorrectly handled certain empty
values. If a user or automated system were tricked into processing a
specially crafted XSLT document, a remote attacker could cause libxslt to
crash, causing a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  libxslt1.1                      1.1.26-14ubuntu0.1

Ubuntu 12.04 LTS:
  libxslt1.1                      1.1.26-8ubuntu1.3

Ubuntu 11.10:
  libxslt1.1                      1.1.26-7ubuntu0.2

Ubuntu 10.04 LTS:
  libxslt1.1                      1.1.26-1ubuntu1.2

Ubuntu 8.04 LTS:
  libxslt1.1                      1.1.22-1ubuntu1.4

In general, a standard system update will make all the necessary changes.

References:
  http://www.ubuntu.com/usn/usn-1784-1
  CVE-2012-6139

Package Information:
  https://launchpad.net/ubuntu/+source/libxslt/1.1.26-14ubuntu0.1
  https://launchpad.net/ubuntu/+source/libxslt/1.1.26-8ubuntu1.3
  https://launchpad.net/ubuntu/+source/libxslt/1.1.26-7ubuntu0.2
  https://launchpad.net/ubuntu/+source/libxslt/1.1.26-1ubuntu1.2
  https://launchpad.net/ubuntu/+source/libxslt/1.1.22-1ubuntu1.4




Spotlight

Biggest ever cyber security exercise in Europe is underway

Posted on 30 October 2014.  |  More than 200 organisations and 400 cyber-security professionals from 29 European countries are testing their readiness to counter cyber-attacks in a day-long simulation, organised by the European Network and Information Security Agency (ENISA).


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Fri, Oct 31st
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //