Skip to content
OpenAdvisories
Unscored RHSA-2008:0649 1 CVE

Red Hat Security Advisory: libxslt security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 26

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as libxslt 0:1.1.11-1.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::as libxslt-debuginfo 0:1.1.11-1.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::as libxslt-devel 0:1.1.11-1.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::as libxslt-python 0:1.1.11-1.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::desktop libxslt 0:1.1.11-1.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::desktop libxslt-debuginfo 0:1.1.11-1.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::desktop libxslt-devel 0:1.1.11-1.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::desktop libxslt-python 0:1.1.11-1.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::es libxslt 0:1.1.11-1.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::es libxslt-debuginfo 0:1.1.11-1.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::es libxslt-devel 0:1.1.11-1.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::es libxslt-python 0:1.1.11-1.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::ws libxslt 0:1.1.11-1.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::ws libxslt-debuginfo 0:1.1.11-1.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::ws libxslt-devel 0:1.1.11-1.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::ws libxslt-python 0:1.1.11-1.el4_7.2
Red Hat · RHEL 5 enterprise_linux:5::client libxslt 0:1.1.17-2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::client libxslt-debuginfo 0:1.1.17-2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::client libxslt-python 0:1.1.17-2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libxslt 0:1.1.17-2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libxslt-debuginfo 0:1.1.17-2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libxslt-devel 0:1.1.17-2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::server libxslt 0:1.1.17-2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::server libxslt-debuginfo 0:1.1.17-2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::server libxslt-devel 0:1.1.17-2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::server libxslt-python 0:1.1.17-2.el5_2.2

Vulnerabilities 1

  • Unscored —
    CVE-2008-2935 Public exploit EPSS 13%

    Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=455848
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0649.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-2935
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2935
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2935