Register | Log in

libxslt

Choose email to subscribe with

general

source: libxslt (main)
version: 1.1.32-2
maintainer: Debian XML/SGML Group (archive) [DMD]
uploaders: YunQiang Su [DMD] – Aron Xu [DMD]
arch: any
std-ver: 4.1.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 1.1.28-2+deb8u3
old-sec: 1.1.28-2+deb8u4
stable: 1.1.29-2.1
testing: 1.1.32-2
unstable: 1.1.32-2

versioned links

1.1.28-2+deb8u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.1.28-2+deb8u4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.1.29-2.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.1.32-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libxslt1-dev (2 bugs: 0, 0, 2, 0)
libxslt1.1 (6 bugs: 0, 2, 4, 0)
python-libxslt1
python-libxslt1-dbg
xsltproc (7 bugs: 0, 5, 2, 0)

action needed

A new upstream version is available: 1.1.33 high

A new upstream version 1.1.33 is available, you should consider packaging it.

Created: 2019-01-06 Last update: 2019-06-20 02:27

lintian reports 6 warnings high

Lintian reports 6 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2017-12-11 Last update: 2019-04-17 15:38

6 security issues in sid high

There are 6 open security issues in sid.

6 important issues:

CVE-2017-2477: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "libxslt" component. It allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVE-2016-4609: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4610, and CVE-2016-4612.
CVE-2016-4610: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4609, and CVE-2016-4612.
CVE-2016-4607: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4608, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.
CVE-2019-11068: libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.
CVE-2016-4608: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.

Please fix them.

Created: 2017-03-10 Last update: 2019-04-15 23:41

6 security issues in stretch high

There are 6 open security issues in stretch.

5 important issues:

CVE-2017-2477: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "libxslt" component. It allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVE-2016-4610: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4609, and CVE-2016-4612.
CVE-2016-4607: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4608, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.
CVE-2016-4609: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4610, and CVE-2016-4612.
CVE-2016-4608: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.

1 issue skipped by the security teams:

CVE-2019-11068: libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.

Please fix them.

Created: 2017-03-10 Last update: 2019-04-15 23:41

5 security issues in jessie high

There are 5 open security issues in jessie.

5 important issues:

CVE-2017-2477: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "libxslt" component. It allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVE-2016-4610: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4609, and CVE-2016-4612.
CVE-2016-4607: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4608, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.
CVE-2016-4609: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4610, and CVE-2016-4612.
CVE-2016-4608: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.

Please fix them.

Created: 2017-03-10 Last update: 2019-04-15 23:41

6 security issues in buster high

There are 6 open security issues in buster.

6 important issues:

CVE-2017-2477: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "libxslt" component. It allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVE-2016-4609: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4610, and CVE-2016-4612.
CVE-2016-4610: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4609, and CVE-2016-4612.
CVE-2016-4607: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4608, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.
CVE-2019-11068: libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.
CVE-2016-4608: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.

Please fix them.

Created: 2017-06-18 Last update: 2019-04-15 23:41

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2017-10-26 Last update: 2017-10-26 07:22

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.3.0 instead of 4.1.4).

Created: 2018-08-20 Last update: 2018-12-23 17:15

news

[2019-04-15] Accepted libxslt 1.1.28-2+deb8u4 (source amd64) into oldstable (Chris Lamb)
[2018-06-01] libxslt 1.1.32-2 MIGRATED to testing (Debian testing watch)
[2018-05-26] Accepted libxslt 1.1.32-2 (source) into unstable (Mattia Rizzolo)
[2018-05-26] Accepted libxslt 1.1.32-1 (source) into unstable (Mattia Rizzolo)
[2017-11-21] libxslt 1.1.29-5 MIGRATED to testing (Debian testing watch)
[2017-11-15] Accepted libxslt 1.1.29-5 (source) into unstable (Mattia Rizzolo)
[2017-11-10] libxslt 1.1.29-4 MIGRATED to testing (Debian testing watch)
[2017-11-05] Accepted libxslt 1.1.29-4 (source) into unstable (Mattia Rizzolo)
[2017-10-28] Accepted libxslt 1.1.29-3 (source) into experimental (Mattia Rizzolo)
[2017-10-18] libxslt 1.1.29-2.2 MIGRATED to testing (Debian testing watch)
[2017-10-12] Accepted libxslt 1.1.29-2.2 (source amd64) into unstable (Manuel A. Fernandez Montecelo)
[2017-04-25] Accepted libxslt 1.1.28-2+deb8u3 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2017-03-31] libxslt 1.1.29-2.1 MIGRATED to testing (Debian testing watch)
[2017-03-28] Accepted libxslt 1.1.29-2.1 (source) into unstable (Salvatore Bonaccorso)
[2017-03-23] Accepted libxslt 1.1.26-14.1+deb7u3 (source amd64) into oldstable (Raphaël Hertzog)
[2016-11-13] Accepted libxslt 1.1.28-2+deb8u2 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2016-11-05] Accepted libxslt 1.1.26-14.1+deb7u2 (source amd64) into oldstable (Emilio Pozuelo Monfort)
[2016-11-02] libxslt 1.1.29-2 MIGRATED to testing (Debian testing watch)
[2016-10-30] Accepted libxslt 1.1.29-2 (source) into unstable (Mattia Rizzolo)
[2016-08-23] libxslt 1.1.29-1 MIGRATED to testing (Debian testing watch)
[2016-08-17] Accepted libxslt 1.1.29-1 (source amd64) into unstable (YunQiang Su)
[2016-06-28] Accepted libxslt 1.1.28-2+deb8u1 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2016-06-12] Accepted libxslt 1.1.26-14.1+deb7u1 (source amd64) into oldstable (signed by: Emilio Pozuelo Monfort)
[2016-05-27] libxslt 1.1.28-4 MIGRATED to testing (Debian testing watch)
[2016-05-20] Accepted libxslt 1.1.28-4 (source) into unstable (Mattia Rizzolo)
[2016-05-15] libxslt 1.1.28-3 MIGRATED to testing (Debian testing watch)
[2016-05-09] Accepted libxslt 1.1.28-3 (source) into unstable (Mattia Rizzolo) (signed by: Gianfranco Costamagna)
[2015-11-13] libxslt 1.1.28-2.1 MIGRATED to testing (Britney)
[2015-11-10] Accepted libxslt 1.1.28-2.1 (source) into unstable (Salvatore Bonaccorso)
[2013-08-11] libxslt 1.1.28-2 MIGRATED to testing (Debian testing watch)

1
2

bugs [bug history graph]

all: 18
RC: 0
I&N: 10
M&W: 8
F&P: 0
patch: 0

links

homepage
lintian (0, 6)
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.1.32-2ubuntu0.1
9 bugs
patches for 1.1.32-2ubuntu0.1

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing