Login
Newsletter
Werbung

Sicherheit: Preisgabe von Informationen in Libxslt (Aktualisierung)
Aktuelle Meldungen Distributionen
Name: Preisgabe von Informationen in Libxslt (Aktualisierung)
ID: USN-3947-2
Distribution: Ubuntu
Plattformen: Ubuntu 12.04 ESM
Datum: Mo, 15. April 2019, 22:53
Referenzen: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11068
Applikationen: The XSLT C library for GNOME
Update von: Preisgabe von Informationen in Libxslt

Originalnachricht


--===============8490773285859737599==
Content-Type: multipart/signed; micalg="pgp-sha256";
protocol="application/pgp-signature";
boundary="=-woaWzoEdJvdNbi9rpsWz"


--=-woaWzoEdJvdNbi9rpsWz
Content-Type: text/plain; charset="UTF-8
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-3947-2
April 15, 2019

libxslt vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.04 ESM

Summary:

Libxslt could be made to expose sensitive information if it
received a specially crafted file.

Software Description:
- libxslt: XSLT processing library

Details:

USN-3947-1 fixed a vulnerability in Libxslt. This update provides
the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

It was discovered that Libxslt incorrectly handled certain documents.
An attacker could possibly use this issue to access sensitive
information.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
libxslt1.1 1.1.26-8ubuntu1.5

In general, a standard system update will make all the necessary
changes.

References:
https://usn.ubuntu.com/usn/usn-3947-2
https://usn.ubuntu.com/usn/usn-3947-1
CVE-2019-11068
--=-woaWzoEdJvdNbi9rpsWz
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=ooUI
-----END PGP SIGNATURE-----

--=-woaWzoEdJvdNbi9rpsWz--



--===============8490773285859737599==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

LS0gCnVidW50dS1zZWN1cml0eS1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKdWJ1bnR1LXNlY3VyaXR5
LWFubm91bmNlQGxpc3RzLnVidW50dS5jb20KTW9kaWZ5IHNldHRpbmdzIG9yIHVuc3Vic2NyaWJl
IGF0OiBodHRwczovL2xpc3RzLnVidW50dS5jb20vbWFpbG1hbi9saXN0aW5mby91YnVudHUtc2Vj
dXJpdHktYW5ub3VuY2UK

--===============8490773285859737599==--
Pro-Linux
Unterstützer werden
Neue Nachrichten
Werbung