RHSA-2012:1265High
Red Hat Security Advisory: libxslt security update
🔗 CVE IDs covered (6)
📋 Description
CVE-2011-1202 — libxslt: Heap address leak in XLST CVE-2011-3970 — libxslt: Out-of-bounds read when parsing certain patterns CVE-2012-2825 — libxslt: DoS when reading unexpected DTD nodes in XSLT CVE-2012-2870 — libxslt: Use-after-free when processing an invalid XPath expression CVE-2012-2871 — libxslt: Heap-buffer overflow caused by bad cast in XSL transforms CVE-2012-2893 — libxslt: Heap-double-free in xmlFreeNodeList
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2012:1265
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=684386
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=788826
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=835982
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=852935
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=852937
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1265.json