This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-4608 →

DEBIAN-CVE-2016-4608

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchO...

Original description

The description as published by the source.

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 libxslt

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-1"}]}]

Debian:13 libxslt

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-1"}]}]

Debian:14 libxslt

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-1"}]}]

References

advisory security-tracker.debian.org