UbuntuUpdates.org

Package "xsltproc"

Name: xsltproc

Description:

XSLT 1.0 command line processor

Latest version: 1.1.39-0exp1ubuntu4.1
Release: plucky (25.04)
Level: security
Repository: main
Head package: libxslt
Homepage: https://gitlab.gnome.org/GNOME/libxslt/-/wikis/home

Links


Download "xsltproc"


Other versions of "xsltproc" in Plucky

Repository Area Version
base main 1.1.39-0exp1ubuntu4
updates main 1.1.39-0exp1ubuntu4.1

Changelog

Version: 1.1.39-0exp1ubuntu4.1 2026-01-07 17:08:19 UTC

  libxslt (1.1.39-0exp1ubuntu4.1) plucky-security; urgency=medium

  * SECURITY UPDATE: Denial of service in psvi memory field.
    - debian/patches/CVE-2025-7424-*.patch: Change logic of tctxt->style->doc
      in libxslt/functions.c, add libxslt/transformInternals.h, add new build
      sections to include file in CMakeLists.txt and libxslt/Makefile.am.
    - CVE-2025-7424

 -- Hlib Korzhynskyy <email address hidden> Tue, 06 Jan 2026 10:10:26 -0330

CVE-2025-7424 A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion du



About   -   Send Feedback to @ubuntu_updates