The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libxslt | Dec 27, 2019 | Jul 1, 2019 |
| Amazon Linux Ami 2 | — | Upgrade java-11-amazon-correttoUpgrade java-11-amazon-corretto-javadocUpgrade java-11-amazon-corretto-headless | Apr 27, 2020 | Jul 1, 2019 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Jul 24, 2019 | Jul 23, 2019 |
| Apple Osx Libxslt | — | Apply Apple macOS Security Update 2019-004 High Sierra | Jul 23, 2019 | Jul 22, 2019 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 11 installer 11.36 (JDK 11.0.5.0.101+11, quarterly CPU) (LTS stream)Apply Azul Zulu JDK 13 installer 13.29 (JDK 13.0.2+6, PSU) (short-term support); migrate to JDK 17 (LTS)Upgrade to Azul Zulu JDK 8 installer 8.43 (JDK 8u241-b08, quarterly CPU) (LTS stream) | Jul 1, 2019 | Jul 1, 2019 |
| Debian | — | Upgrade libxslt | Jul 24, 2019 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libxsltUpgrade libxslt-develUpgrade libxslt-python | Dec 4, 2019 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libxsltUpgrade libxslt-pythonUpgrade libxslt-devel | Sep 25, 2019 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libxslt-pythonUpgrade libxslt-develUpgrade libxslt | Sep 12, 2019 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libxsltUpgrade libxslt-devel | Jan 3, 2020 | Jul 1, 2019 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Mar 2, 2020 | Jul 1, 2019 |
| Oracle Solaris | — | Upgrade library/libxslt to version 1.1.33-11.4.13.0.1.2.0 on Solaris 11.4Upgrade library/python/libxsl-27 to version 1.1.33-11.4.13.0.1.2.0 on Solaris 11.4 | Sep 17, 2019 | Jul 1, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 1, 2019 |
| Suse | — | Upgrade libxslt-pythonUpgrade libxslt-toolsUpgrade libxslt1-32bitUpgrade libxslt-devel-32bitUpgrade libxslt1Upgrade libxslt-devel | Jul 18, 2019 | Jul 1, 2019 |
| Ubuntu | — | Upgrade libxslt1.1Upgrade libxslt1.1 (Ubuntu Pro) | Oct 23, 2019 | Jul 1, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 1, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub