Mageia alert MGASA-2012-0272 (libxslt)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2012-0272:
 libxslt-1.1.26-6.20120127.3.mga2 (2/core) 
Date:
    	     
 
Sat, 15 Sep 2012 20:16:56 +0200
Message-ID:
    	     
 
<20120915181656.GA15987@valstar.mageia.org>
Archive-link:
    	     
 
Article, Thread
              
MGASA-2012-0272
Date: 	September 15th, 2012
Affected releases: 	2


Description:
Updated libxslt packages fix security vulnerabilities:

libxslt 1.1.26 and earlier does not properly manage memory, which might
allow remote attackers to cause a denial of service (application crash)
via a crafted XSLT expression that is not properly identified during
XPath navigation, related to (1) the xsltCompileLocationPathPattern
function in libxslt/pattern.c and (2) the xsltGenerateIdFunction
function in libxslt/functions.c (CVE-2012-2870).

A heap-based buffer overflow flaw was found in the way libxslt applied
templates to nodes selected by certain namespaces. An attacker could
use this flaw to create a malicious XSL file that, when used by an
application linked against libxslt to perform an XSL transformation,
could cause the application to crash or, possibly, execute arbitrary
code with the privileges of the user running the application
(CVE-2012-2871).


Updated Packages:
lib(64)xslt1-1.1.26-6.20120127.3.mga2
lib(46)xslt-devel-1.1.26-6.20120127.3.mga2
python-libxslt-1.1.26-6.20120127.3.mga2
xsltproc-1.1.26-6.20120127.3.mga2


References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2870
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2871
https://rhn.redhat.com/errata/RHSA-2012-1265.html
https://bugs.mageia.org/show_bug.cgi?id=7480
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-...