libxslt 1.1.34-4ubuntu0.22.04.4 source package in Ubuntu
Changelog
libxslt (1.1.34-4ubuntu0.22.04.4) jammy-security; urgency=medium
* SECURITY UPDATE: ASLR bypass due to exposure of sensitive information
- debian/patches/0002-Make-generate-id-deterministic.patch: removed, as
this was an old and incomplete implementation of the fix.
- debian/patches/CVE-2023-40403-1.patch: implement infrastructure to
store extra data in source nodes.
- debian/patches/CVE-2023-40403-2.patch: store key status of source
nodes as bit flag.
- debian/patches/CVE-2023-40403-3.patch: store RVT ownership in
'compression' member.
- debian/patches/CVE-2023-40403-4.patch: remove the use of
&base_address when generating ids in libxslt/functions.c.
- debian/patches/CVE-2023-40403-5.patch: clean up attributes in
source doc.
- CVE-2023-40403
-- Edwin Jiang <email address hidden> Fri, 20 Jun 2025 09:52:36 -0400
Upload details
- Uploaded by:
- Edwin Jiang
- Uploaded to:
- Jammy
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any
- Section:
- text
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| libxslt_1.1.34.orig.tar.gz | 3.4 MiB | 98b1bd46d6792925ad2dfe9a87452ea2adebf69dcb9919ffd55bf926a7f93f7f |
| libxslt_1.1.34.orig.tar.gz.asc | 488 bytes | 673d1477552bdd5b0cc665704e77ca70e6be5d2f257e6a5a341c846719d747cf |
| libxslt_1.1.34-4ubuntu0.22.04.4.debian.tar.xz | 30.4 KiB | 743239094573c60580b2e66b59b15073cdee37c4482d48645a42b44fca779d9e |
| libxslt_1.1.34-4ubuntu0.22.04.4.dsc | 2.5 KiB | 83a85c598f908b08bf2c1341ae83ba8a8f2b4f84735c889f9d2a8684782c8709 |
Available diffs
Binary packages built by this source
- libxslt1-dev: XSLT 1.0 processing library - development kit
XSLT is an XML language for defining transformations of XML files from
XML to some other arbitrary format, such as XML, HTML, plain text, etc.
using standard XSLT stylesheets. libxslt is a C library which
implements XSLT version 1.0.
.
This package contains the development files for libxslt.
- libxslt1.1: XSLT 1.0 processing library - runtime library
XSLT is an XML language for defining transformations of XML files from
XML to some other arbitrary format, such as XML, HTML, plain text, etc.
using standard XSLT stylesheets. libxslt is a C library which
implements XSLT version 1.0.
.
This package contains the libxslt library used by applications for XSLT
transformations.
- libxslt1.1-dbgsym: debug symbols for libxslt1.1
- xsltproc: XSLT 1.0 command line processor
XSLT is an XML language for defining transformations of XML files from
XML to some other arbitrary format, such as XML, HTML, plain text, etc.
using standard XSLT version 1.0 stylesheets.
.
This package contains a command line tool that facilitates XSLT
transformations.
- xsltproc-dbgsym: debug symbols for xsltproc
