Skip to content
OpenAdvisories
High DLA-1973-1 1 CVE

libxslt - security update

Published Oct 27, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 libxslt 1.1.28-2+deb8u6

Vulnerabilities 1

  • High 7.5
    CVE-2019-18197

    Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability

    In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written …

    nokogiri libxslt libxslt libxslt Debian Ubuntu Alpine RubyGems