libxslt 1.1.34-4ubuntu0.22.04.4 source package in Ubuntu

Changelog

libxslt (1.1.34-4ubuntu0.22.04.4) jammy-security; urgency=medium

  * SECURITY UPDATE: ASLR bypass due to exposure of sensitive information
    - debian/patches/0002-Make-generate-id-deterministic.patch: removed, as
    this was an old and incomplete implementation of the fix.
    - debian/patches/CVE-2023-40403-1.patch: implement infrastructure to
    store extra data in source nodes.
    - debian/patches/CVE-2023-40403-2.patch: store key status of source
    nodes as bit flag.
    - debian/patches/CVE-2023-40403-3.patch: store RVT ownership in
    'compression' member.
    - debian/patches/CVE-2023-40403-4.patch: remove the use of
    &base_address when generating ids in libxslt/functions.c.
    - debian/patches/CVE-2023-40403-5.patch: clean up attributes in
    source doc.
    - CVE-2023-40403

 -- Edwin Jiang <email address hidden>  Fri, 20 Jun 2025 09:52:36 -0400

Upload details

Uploaded by:
Edwin Jiang
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
text
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libxslt_1.1.34.orig.tar.gz 3.4 MiB 98b1bd46d6792925ad2dfe9a87452ea2adebf69dcb9919ffd55bf926a7f93f7f
libxslt_1.1.34.orig.tar.gz.asc 488 bytes 673d1477552bdd5b0cc665704e77ca70e6be5d2f257e6a5a341c846719d747cf
libxslt_1.1.34-4ubuntu0.22.04.4.debian.tar.xz 30.4 KiB 743239094573c60580b2e66b59b15073cdee37c4482d48645a42b44fca779d9e
libxslt_1.1.34-4ubuntu0.22.04.4.dsc 2.5 KiB 83a85c598f908b08bf2c1341ae83ba8a8f2b4f84735c889f9d2a8684782c8709

View changes file

Binary packages built by this source

libxslt1-dev: XSLT 1.0 processing library - development kit

 XSLT is an XML language for defining transformations of XML files from
 XML to some other arbitrary format, such as XML, HTML, plain text, etc.
 using standard XSLT stylesheets. libxslt is a C library which
 implements XSLT version 1.0.
 .
 This package contains the development files for libxslt.

libxslt1.1: XSLT 1.0 processing library - runtime library

 XSLT is an XML language for defining transformations of XML files from
 XML to some other arbitrary format, such as XML, HTML, plain text, etc.
 using standard XSLT stylesheets. libxslt is a C library which
 implements XSLT version 1.0.
 .
 This package contains the libxslt library used by applications for XSLT
 transformations.

libxslt1.1-dbgsym: debug symbols for libxslt1.1
xsltproc: XSLT 1.0 command line processor

 XSLT is an XML language for defining transformations of XML files from
 XML to some other arbitrary format, such as XML, HTML, plain text, etc.
 using standard XSLT version 1.0 stylesheets.
 .
 This package contains a command line tool that facilitates XSLT
 transformations.

xsltproc-dbgsym: debug symbols for xsltproc