Lucene search

K
almalinuxAlmaLinuxALSA-2020:4464
HistoryNov 03, 2020 - 12:07 p.m.

Moderate: libxslt security update

2020-11-0312:07:14
errata.almalinux.org
14

0.008 Low

EPSS

Percentile

81.7%

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.

Security Fix(es):

  • libxslt: xsltCheckRead and xsltCheckWrite routines security bypass by crafted URL (CVE-2019-11068)

  • libxslt: use after free in xsltCopyText in transform.c could lead to information disclosure (CVE-2019-18197)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.