lp:ubuntu/natty-security/libxslt

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

23. By Marc Deslauriers on 2012-09-28

* SECURITY UPDATE: information disclosure via generate-id XPath function
  - libxslt/functions.c: do not expose object addresses directly.
  - ecb6bcb8d1b7e44842edde3929f412d46b40c89f
  - CVE-2011-1202
* SECURITY UPDATE: denial of service via out-of-bounds read
  - libxslt/pattern.c: fix improper loop exit.
  - fe5a4fa33eb85bce3253ed3742b1ea6c4b59b41b
  - CVE-2011-3970
* SECURITY UPDATE: denial of service via out-of-bounds read
  - libxslt/xsltutils.h: check for XML_ELEMENT_NODE
  - e6a0bc8081271f33b9899eb78e1da1a2a0428419
  - CVE-2012-2825
* SECURITY UPDATE: denial of service via crafted XSLT expression
  - harden code in libexslt/functions.c, libxslt/attributes.c,
    libxslt/functions.c, libxslt/pattern.c, libxslt/preproc.c,
    libxslt/templates.c, libxslt/transform.c, libxslt/variables.c,
    libxslt/xslt.c, libxslt/xsltutils.c.
  - 8566ab4a10158d195adb5f1f61afe1ee8bfebd12
  - 4da0f7e207f14a03daad4663865c285eb27f93e9
  - 24653072221e76d2f1f06aa71225229b532f8946
  - 1564b30e994602a95863d9716be83612580a2fed
  - CVE-2012-2870
* SECURITY UPDATE: denial of service and possible code execution during
  handling of XSL transforms
  - libxslt/transform.c: check for XML_NAMESPACE_DECL
  - 937ba2a3eb42d288f53c8adc211bd1122869f0bf
  - CVE-2012-2871
* SECURITY UPDATE: denial of service and possible code execution via
  double free during XSL transforms
  - libxslt/templates.c: Fix dictionary string usage
  - 54977ed7966847e305a2008cb18892df26eeb065
  - CVE-2012-2893

22. By Martin Pitt on 2010-12-03

No-change upload to drop upstream changelog.

21. By Mike Hommey <email address hidden> on 2010-08-26

debian/python-libxslt1-dbg.preinst: Add preinst snippet to remove
/usr/share/doc/python-libxslt1-dbg symlink on Ubuntu. This is an
Ubuntu-only fix, but allows Ubuntu to just use the Debian package
without further modifications.
Closes: #587910

20. By Matthias Klose on 2010-01-19

Merge with Debian; remaining changes:
Build a python-libxslt1-dbg package.

19. By Matthias Klose on 2009-02-22

Build for python2.6.

18. By Michael Vogt on 2008-11-13

* Merge from debian unstable, remaining changes:
  - build a python-libxslt1-dbg package.

17. By Jamie Strandboge on 2008-09-04

* SECURITY UPDATE: arbitrary code execution via RC4 functions.
* libexslt/crypto.c: upstream fixes, thanks to Moritz Muehlenhoff.
* References
  CVE-2008-2935

16. By Sebastien Bacher on 2008-06-23

* merge from debian, remaining ubuntu changes:
  - build a python-libxslt1-dbg package.

15. By Sebastien Bacher on 2007-11-19

* Merge from debian unstable, remaining changes:
  - Build a python-libxslt1-dbg package.

14. By Matthias Klose on 2007-08-09

* Merge from Debian; remaining changes:
  - Build a python-libxslt1-dbg package.