Package: libxslt Vulnerability: Denial of service Problem type: Remote CVE ID: CVE-2012-6139 Debian Bug: 703933 Description: - Nicolas Gregoire discovered that libxslt, an XSLT processing runtime library, is vulnerable to denial of service attacks through crafted XSL stylesheets. Affected Versions and Fixes: - Stable distribution (squeeze): fixed in version 1.1.26-6squeeze3. - Testing distribution (wheezy): fixed in version 1.1.26-14.1. - Unstable distribution (sid): fixed in version 1.1.26-14.1. Recommendation: Upgrade your libxslt packages. References: - Debian Security Advisories - Debian Security FAQ - Mailing list Advisory Date: April 03, 2013 From: Salvatore Bonaccorso Debian Security Advisory: DSA-2654-1