REDHAT-BUG-1709697: Medium severity libxslt vulnerability
libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.
Upstream commit: https://gitlab.gnome.org/GNOME/libxslt/commit/e03553605b45c88f0b4b2980adfbbb8f6fca2fd6
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1709697?
The severity of REDHAT-BUG-1709697 is considered moderate due to the potential bypass of a protection mechanism.
How do I fix REDHAT-BUG-1709697?
To fix REDHAT-BUG-1709697, update to a version of libxslt that is newer than 1.1.33 where the vulnerability has been addressed.
What causes REDHAT-BUG-1709697?
REDHAT-BUG-1709697 is caused by improper handling of error codes in the xsltCheckRead and xsltCheckWrite functions.
Which versions of libxslt are affected by REDHAT-BUG-1709697?
Versions of libxslt up to and including 1.1.33 are affected by REDHAT-BUG-1709697.
Is there a workaround for REDHAT-BUG-1709697?
A recommended workaround for REDHAT-BUG-1709697 is to restrict access to the affected functions until an update can be applied.