Skip to content
OpenAdvisories
Critical USN-3947-1 1 CVE

libxslt vulnerability

Published Apr 15, 2019 · Updated May 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Libxslt incorrectly handled certain documents.
An attacker could possibly use this issue to access sensitive information.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS libxslt 1.1.28-2ubuntu0.2
Ubuntu · 16.04 LTS 16.04:LTS libxslt 1.1.28-2.1ubuntu0.2
Ubuntu · 18.04 LTS 18.04:LTS libxslt 1.1.29-5ubuntu0.1

Vulnerabilities 1

  • Critical 9.8
    CVE-2019-11068

    Nokogiri vulnerable to libxslt protection mechanism bypass

    libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequentl…

    nokogiri libxslt libxslt libxslt Debian Ubuntu Alpine RubyGems

References

  • report
    https://ubuntu.com/security/CVE-2019-11068