Bug 811686 (CVE-2012-6139) - VUL-0: CVE-2012-6139: libxslt: two denial of service (crashes)
Summary: VUL-0: CVE-2012-6139: libxslt: two denial of service (crashes)
Status: RESOLVED FIXED
Alias: CVE-2012-6139
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Deadline: 2013-11-01
Assignee: Security Team bot
QA Contact: Security Team bot
URL:
Whiteboard: maint:released:sles9-sp3-teradata:519...
Keywords:
Depends on:
Blocks:
 
Reported: 2013-03-26 10:26 UTC by Marcus Meissner
Modified: 2013-11-11 15:54 UTC (History)
2 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Marcus Meissner 2013-03-26 10:26:33 UTC 
is public, via oss-sec

CVE-2012-6139

From: Agostino Sarubbo <ago@gentoo.org>
Date: Mon, 25 Mar 2013 17:04:05 +0100
Subject: [oss-security] CVE request: libxslt "xsltDocumentFunction()" and "xsltAddKey()" Denial of Service Vulnerabilities

From the secunia advisory: https://secunia.com/advisories/52805/

1) An error within the "xsltDocumentFunction()" function (libxslt/functions.c) 
when parsing XSL templates can be exploited to cause a crash.

Commit code:
http://git.gnome.org/browse/libxslt/commit/?id=6c99c519d97e5fcbec7a9537d190efb442e4e833


2) A NULL-pointer dereference error within the "xsltAddKey()" function 
(libxslt/keys.c) when parsing XSL keys can be exploited to cause a crash.

Commit code:
http://git.gnome.org/browse/libxslt/commit/?id=dc11b6b379a882418093ecc8adf11f6166682e8d



Both issue are fixed in the version 1.1.28
Comment 2 Marcus Meissner 2013-03-26 10:30:04 UTC 
both seem to be NULL ptr dereferences.
Comment 3 Vítězslav Čížek 2013-03-26 11:06:43 UTC 
Both 12.3 and Factory contain fixed version (1.1.28) already.
Packages for 12.1 and 12.2 submitted.
Comment 4 Bernhard Wiedemann 2013-03-26 12:00:18 UTC 
This is an autogenerated message for OBS integration:
This bug (811686) was mentioned in
https://build.opensuse.org/request/show/161157 Maintenance /
Comment 5 Swamp Workflow Management 2013-03-26 23:00:16 UTC 
bugbot adjusting priority
Comment 7 Swamp Workflow Management 2013-03-27 14:09:17 UTC 
The SWAMPID for this issue is 51917.
This issue was rated as moderate.
Please submit fixed packages until 2013-04-10.
When done, please reassign the bug to security-team@suse.de.
Patchinfo will be handled by security team.
Comment 11 Bernhard Wiedemann 2013-03-28 14:00:20 UTC 
This is an autogenerated message for OBS integration:
This bug (811686) was mentioned in
https://build.opensuse.org/request/show/161614 Evergreen:11.2 / libxslt
Comment 12 Bernhard Wiedemann 2013-03-29 05:00:27 UTC 
This is an autogenerated message for OBS integration:
This bug (811686) was mentioned in
https://build.opensuse.org/request/show/161690 Maintenance /
Comment 13 Swamp Workflow Management 2013-04-02 15:04:53 UTC 
openSUSE-SU-2013:0585-1: An update that fixes one vulnerability is now available.

Category: security (moderate)
Bug References: 811686
CVE References: CVE-2012-6139
Sources used:
openSUSE 12.3 (src):    libxslt-1.1.28-3.4.1, libxslt-python-1.1.28-3.4.1
openSUSE 12.2 (src):    libxslt-1.1.26-22.6.1, libxslt-python-1.1.26-22.6.1
openSUSE 12.1 (src):    libxslt-1.1.26-15.11.1, libxslt-python-1.1.26-15.11.1
Comment 14 Bernhard Wiedemann 2013-04-02 16:01:27 UTC 
This is an autogenerated message for OBS integration:
This bug (811686) was mentioned in
https://build.opensuse.org/request/show/162220 Evergreen:11.2 / libxslt
Comment 15 Swamp Workflow Management 2013-04-02 16:04:37 UTC 
openSUSE-SU-2013:0593-1: An update that fixes one vulnerability is now available.

Category: security (moderate)
Bug References: 811686
CVE References: CVE-2012-6139
Sources used:
openSUSE 11.4 (src):    libxslt-1.1.26-3.17.1
Comment 16 Sebastian Krahmer 2013-04-30 08:10:34 UTC 
released
Comment 17 Swamp Workflow Management 2013-04-30 09:04:37 UTC 
Update released for: libxslt, libxslt-32bit, libxslt-debuginfo, libxslt-debuginfo-32bit, libxslt-debugsource, libxslt-devel, libxslt-devel-32bit, libxslt-python, libxslt-python-debuginfo, libxslt-python-debugsource
Products:
SLE-SERVER 11-SP1-TERADATA (x86_64)
Comment 18 Swamp Workflow Management 2013-04-30 09:05:04 UTC 
Update released for: libxslt, libxslt-devel, libxslt-python
Products:
SUSE-CORE 9-SP3-TERADATA (x86_64)
Comment 19 Swamp Workflow Management 2013-04-30 11:02:00 UTC 
Update released for: libxslt, libxslt-32bit, libxslt-debuginfo, libxslt-debuginfo-32bit, libxslt-debuginfo-x86, libxslt-debugsource, libxslt-devel, libxslt-devel-32bit, libxslt-python, libxslt-python-debuginfo, libxslt-python-debugsource, libxslt-x86
Products:
SLE-DEBUGINFO 11-SP2 (i386, ia64, ppc64, s390x, x86_64)
SLE-DESKTOP 11-SP2 (i386, x86_64)
SLE-SDK 11-SP2 (i386, ia64, ppc64, s390x, x86_64)
SLE-SERVER 11-SP2 (i386, ia64, ppc64, s390x, x86_64)
SLES4VMWARE 11-SP2 (i386, x86_64)
Comment 20 Swamp Workflow Management 2013-04-30 11:04:33 UTC 
Update released for: libxslt, libxslt-32bit, libxslt-debuginfo, libxslt-devel, libxslt-devel-32bit, libxslt-python, libxslt-python-debuginfo
Products:
SLE-SERVER 10-SP3-TERADATA (x86_64)
Comment 21 Swamp Workflow Management 2013-04-30 11:16:47 UTC 
Update released for: libxslt, libxslt-32bit, libxslt-64bit, libxslt-debuginfo, libxslt-devel, libxslt-devel-32bit, libxslt-devel-64bit, libxslt-python, libxslt-python-debuginfo, libxslt-x86
Products:
SLE-DESKTOP 10-SP4 (i386, x86_64)
SLE-SDK 10-SP4 (i386, ia64, ppc, s390x, x86_64)
SLE-SERVER 10-SP4 (i386, ia64, ppc, s390x, x86_64)
Comment 22 Swamp Workflow Management 2013-10-18 15:47:23 UTC 
The SWAMPID for this issue is 54776.
This issue was rated as moderate.
Please submit fixed packages until 2013-11-01.
When done, please reassign the bug to security-team@suse.de.
Patchinfo will be handled by security team.
Comment 23 Swamp Workflow Management 2013-11-11 15:54:40 UTC 
Update released for: libxslt, libxslt-32bit, libxslt-debuginfo, libxslt-devel, libxslt-devel-32bit, libxslt-python, libxslt-python-debuginfo
Products:
SLE-SERVER 10-SP3-LTSS (i386, s390x, x86_64)