Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2019-11068 →

DEBIAN-CVE-2019-11068

libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 libxslt

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-2.1"}]}]

Debian:13 libxslt

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-2.1"}]}]

Debian:14 libxslt

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-2.1"}]}]

Références

advisory security-tracker.debian.org