Nicolas Gregoire discovered that libxslt, an XSLT processing runtime library, is prone to denial of service vulnerabilities via crafted XSL stylesheets.

For the stable distribution (squeeze), this problem has been fixed in version 1.1.26-6+squeeze3. For the testing distribution (wheezy), this problem has been fixed in version 1.1.26-14.1. For the unstable distribution (sid), this problem has been fixed in version 1.1.26-14.1. We recommend that you upgrade your libxslt packages.

XSLT is an XML language for defining transformations of XML files from XML to some other arbitrary format, such as XML, HTML, plain text, etc. using standard XSLT stylesheets. libxslt is a C library which implements XSLT version 1.0.

libxslt on Debian Linux

This check tests the installed software version using the apt package manager.

• http://www.debian.org/security/2013/dsa-2654.html

---

Updated on 2015-03-25