Source: libxslt
Version: 1.1.35-1.2
Severity: important
Tags: security upstream
Forwarded: https://gitlab.gnome.org/GNOME/libxslt/-/issues/94
X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Control: found -1 1.1.35-1+deb12u1
Control: found -1 1.1.35-1

Hi,

The following vulnerability was published for libxslt.

CVE-2023-40403[0]:
| The issue was addressed with improved memory handling. This issue is
| fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7,
| macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma
| 14. Processing web content may disclose sensitive information.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2023-40403
    https://www.cve.org/CVERecord?id=CVE-2023-40403
[1] https://gitlab.gnome.org/GNOME/libxslt/-/issues/94
[2] 
https://gitlab.gnome.org/GNOME/libxslt/-/commit/82f6cbf8ca61b1f9e00dc04aa3b15d563e7bbc6d
[3] https://gitlab.gnome.org/GNOME/libxslt/-/issues/94#note_1855467

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

Reply via email to