Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2012-2870

Published: 31 August 2012

libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service (application crash) via a crafted XSLT expression that is not properly identified during XPath navigation, related to (1) the xsltCompileLocationPathPattern function in libxslt/pattern.c and (2) the xsltGenerateIdFunction function in libxslt/functions.c.

Notes

AuthorNote
jdstrand
mdeslaur provided the update for libxslt

Priority

Low

Status

Package Release Status
chromium-browser
Launchpad, Ubuntu, Debian
hardy Does not exist

lucid
Released (3.0.1271.97-0ubuntu0.10.04.1)
natty Ignored
(end of life)
oneiric
Released (3.0.1271.97-0ubuntu0.11.10.1)
precise
Released (3.0.1271.97-0ubuntu0.12.04.1)
quantal
Released (3.0.1271.97-0ubuntu0.12.10.1)
upstream
Released (21.0.1180.89~r154005-1)
Patches:
upstream: http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/pattern.c?view=log
upstream: http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/pattern.c?r1=118654&r2=150123
upstream: http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/functions.c?view=log
upstream: http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/functions.c?r1=75684&r2=149998




libxslt
Launchpad, Ubuntu, Debian
hardy
Released (1.1.22-1ubuntu1.3)
lucid
Released (1.1.26-1ubuntu1.1)
natty
Released (1.1.26-6ubuntu0.1)
oneiric
Released (1.1.26-7ubuntu0.1)
precise
Released (1.1.26-8ubuntu1.2)
quantal Not vulnerable
(1.1.26-14)
upstream Needs triage

Patches:




upstream: http://git.gnome.org/browse/libxslt/commit/libxslt/pattern.c?id=8566ab4a10158d195adb5f1f61afe1ee8bfebd12
upstream: http://git.gnome.org/browse/libxslt/commit/libxslt/functions.c?id=4da0f7e207f14a03daad4663865c285eb27f93e9
upstream: http://git.gnome.org/browse/libxslt/commit/libexslt/functions.c?id=24653072221e76d2f1f06aa71225229b532f8946
upstream: http://git.gnome.org/browse/libxslt/commit/?id=1564b30e994602a95863d9716be83612580a2fed