tocsin

Debian/xmlsec1: unknown

xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involv

Action: Upgrade xmlsec1 to 1.2.14-1.1 or later.

Affected

introducedfixedlast affected
01.2.14-1.1-

Fixed versions

1.2.14-1.1

Sources

published · modified · JSON