Oval Definition:oval:com.redhat.rhsa:def:20080649
Revision Date:2008-07-31Version:636
Title:RHSA-2008:0649: libxslt security update (Moderate)
Description:libxslt is a library for transforming XML files into other XML files using the standard XSLT stylesheet transformation mechanism.

  • A heap buffer overflow flaw was discovered in the RC4 libxslt library extension. An attacker could create a malicious XSL file that would cause a crash, or, possibly, execute arbitrary code with the privileges of the application using the libxslt library to perform XSL transformations on untrusted XSL style sheets. (CVE-2008-2935)

    Red Hat would like to thank Chris Evans for reporting this vulnerability.

    All libxslt users are advised to upgrade to these updated packages, which contain a backported patch to resolve this issue.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2008-2935
    RHSA-2008:0649
    RHSA-2008:0649-03
    RHSA-2008:0649-03
    Platform(s):Red Hat Enterprise Linux 4
    Red Hat Enterprise Linux 5
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND
  • libxslt is earlier than 0:1.1.11-1.el4_7.2
  • AND libxslt is signed with Red Hat redhatrelease2 key
  • libxslt-devel is earlier than 0:1.1.11-1.el4_7.2
  • AND libxslt-devel is signed with Red Hat redhatrelease2 key
  • libxslt-python is earlier than 0:1.1.11-1.el4_7.2
  • AND libxslt-python is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • libxslt is earlier than 0:1.1.17-2.el5_2.2
  • AND libxslt is signed with Red Hat redhatrelease2 key
  • libxslt-devel is earlier than 0:1.1.17-2.el5_2.2
  • AND libxslt-devel is signed with Red Hat redhatrelease2 key
  • libxslt-python is earlier than 0:1.1.17-2.el5_2.2
  • AND libxslt-python is signed with Red Hat redhatrelease2 key
  • Definition Synopsis
  • Release Information
  • Red Hat Enterprise Linux 4 is installed
  • AND
  • libxslt is earlier than 0:1.1.11-1.el4_7.2
  • AND libxslt is signed with Red Hat master key
  • libxslt-devel is earlier than 0:1.1.11-1.el4_7.2
  • AND libxslt-devel is signed with Red Hat master key
  • libxslt-python is earlier than 0:1.1.11-1.el4_7.2
  • AND libxslt-python is signed with Red Hat master key
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • libxslt is earlier than 0:1.1.17-2.el5_2.2
  • AND libxslt is signed with Red Hat redhatrelease key
  • libxslt-devel is earlier than 0:1.1.17-2.el5_2.2
  • AND libxslt-devel is signed with Red Hat redhatrelease key
  • libxslt-python is earlier than 0:1.1.17-2.el5_2.2
  • AND libxslt-python is signed with Red Hat redhatrelease key
  • BACK