Errata overview
Errata ID 456
Date 2017-09-28
Source package libxslt
Fixed in version 1.1.26-6.43.201704191032
Description
Multiple vulnerabilities have been found in libxslt:
* The xsltStylePreCompute function in preproc.c does not check if
  the parent nonfusion" issue. (CVE-2015-7995)
* numbers.c mishandles nssibly have unspecified other impact via a
  crafted document. (CVE-2016-1683)
* numbers.c mishandles t or resource consumption) or possibly have
  unspecified other impact via a crafted document. (CVE-2016-1684)
* heap overread can cause arbitrary code execution or denial of
  service (CVE-2016-4738)
* integer overflow in libxslt (CVE-2017-5029)
Additional notes
CVE ID CVE-2015-7995
CVE-2016-1683
CVE-2016-1684
CVE-2016-4738
CVE-2017-5029
UCS Bug number #42891