Skip to content
OpenAdvisories
Unscored RHSA-2012:1265 6 CVEs

Red Hat Security Advisory: libxslt security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 26

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client libxslt 0:1.1.17-4.el5_8.3
Red Hat · RHEL 5 enterprise_linux:5::client libxslt-debuginfo 0:1.1.17-4.el5_8.3
Red Hat · RHEL 5 enterprise_linux:5::client libxslt-python 0:1.1.17-4.el5_8.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libxslt 0:1.1.17-4.el5_8.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libxslt-debuginfo 0:1.1.17-4.el5_8.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libxslt-devel 0:1.1.17-4.el5_8.3
Red Hat · RHEL 5 enterprise_linux:5::server libxslt 0:1.1.17-4.el5_8.3
Red Hat · RHEL 5 enterprise_linux:5::server libxslt-debuginfo 0:1.1.17-4.el5_8.3
Red Hat · RHEL 5 enterprise_linux:5::server libxslt-devel 0:1.1.17-4.el5_8.3
Red Hat · RHEL 5 enterprise_linux:5::server libxslt-python 0:1.1.17-4.el5_8.3
Red Hat · RHEL 6 enterprise_linux:6::client libxslt 0:1.1.26-2.el6_3.1
Red Hat · RHEL 6 enterprise_linux:6::client libxslt-debuginfo 0:1.1.26-2.el6_3.1
Red Hat · RHEL 6 enterprise_linux:6::client libxslt-devel 0:1.1.26-2.el6_3.1
Red Hat · RHEL 6 enterprise_linux:6::client libxslt-python 0:1.1.26-2.el6_3.1
Red Hat · RHEL 6 enterprise_linux:6::computenode libxslt 0:1.1.26-2.el6_3.1
Red Hat · RHEL 6 enterprise_linux:6::computenode libxslt-debuginfo 0:1.1.26-2.el6_3.1
Red Hat · RHEL 6 enterprise_linux:6::computenode libxslt-devel 0:1.1.26-2.el6_3.1
Red Hat · RHEL 6 enterprise_linux:6::computenode libxslt-python 0:1.1.26-2.el6_3.1
Red Hat · RHEL 6 enterprise_linux:6::server libxslt 0:1.1.26-2.el6_3.1
Red Hat · RHEL 6 enterprise_linux:6::server libxslt-debuginfo 0:1.1.26-2.el6_3.1
Red Hat · RHEL 6 enterprise_linux:6::server libxslt-devel 0:1.1.26-2.el6_3.1
Red Hat · RHEL 6 enterprise_linux:6::server libxslt-python 0:1.1.26-2.el6_3.1
Red Hat · RHEL 6 enterprise_linux:6::workstation libxslt 0:1.1.26-2.el6_3.1
Red Hat · RHEL 6 enterprise_linux:6::workstation libxslt-debuginfo 0:1.1.26-2.el6_3.1
Red Hat · RHEL 6 enterprise_linux:6::workstation libxslt-devel 0:1.1.26-2.el6_3.1
Red Hat · RHEL 6 enterprise_linux:6::workstation libxslt-python 0:1.1.26-2.el6_3.1

Vulnerabilities 6

  • Unscored —
    CVE-2011-1202

    The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.…

    libxslt Debian
  • Unscored —
    CVE-2011-3970

    libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service (out-of-boun…

    libxslt Debian
  • Unscored —
    CVE-2012-2825

    The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incor…

    libxslt Debian
  • Unscored —
    CVE-2012-2870

    libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might …

    libxslt Debian
  • Unscored —
    CVE-2012-2871

    libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an uns…

    libxslt Debian
  • Unscored —
    CVE-2012-2893

    Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a …

    libxslt Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=684386
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=788826
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=835982
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=852935
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=852937
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1265.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-1202
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1202
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1202
  • report
    https://access.redhat.com/security/cve/CVE-2011-3970
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3970
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3970
  • report
    https://access.redhat.com/security/cve/CVE-2012-2825
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-2825
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-2825
  • report
    https://access.redhat.com/security/cve/CVE-2012-2870
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-2870
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-2870
  • report
    https://access.redhat.com/security/cve/CVE-2012-2871
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-2871
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-2871
  • report
    https://access.redhat.com/security/cve/CVE-2012-2893
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=860671
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-2893
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-2893