Debian Security Advisory
DLA-3101-1 libxslt -- LTS security update
- Date Reported:
- 09 Sep 2022
- Affected Packages:
- libxslt
- Vulnerable:
- Yes
- Security database references:
- In Mitre's CVE dictionary: CVE-2019-5815, CVE-2021-30560.
- More information:
-
Two vulnerabilities were discovered in libxslt, an XSLT processing runtime library, that could result in denial of service or potentially the execution of arbitrary code if malicious files are processed.
For Debian 10 buster, these problems have been fixed in version 1.1.32-2.2~deb10u2.
We recommend that you upgrade your libxslt packages.
For the detailed security status of libxslt please refer to its security tracker page at: https://security-tracker.debian.org/tracker/libxslt
Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS