[xml/sgml-pkgs] Bug#842570: libxslt: CVE-2016-4738: possible heap overread
carnil at debian.org
Sun Oct 30 13:09:41 UTC 2016
Tags: security upstream patch
the following vulnerability was published for libxslt.
| libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and
| watchOS before 3 allows remote attackers to execute arbitrary code or
| cause a denial of service (memory corruption) via a crafted web site.
Unfortunately as for many libxml2 issues, the above is not very
specific and there is upstream bug referenced. But the fix is
mentioned as .
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
Please adjust the affected versions in the BTS as needed.
More information about the debian-xml-sgml-pkgs