Description
Uninitialized read in Nokogiri gem
In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 14 | | | 1.1.32-2.1 |
debian 11 | | | 1.1.32-2.1 |
 alpine v3.10 | | =1.1.24-r0 || =1.1.24-r1 || =1.1.26-r0 || =1.1.26-r1 || =1.1.26-r2 || =1.1.26-r3 || =1.1.26-r4 || =1.1.26-r5 || =1.1.26-r6 || =1.1.26-r7 || =1.1.26-r8 || =1.1.26-r9 || =1.1.27-r0 || =1.1.27-r1 || =1.1.28-r0 || =1.1.28-r1 || =1.1.28-r2 || =1.1.29-r0 || =1.1.29-r1 || =1.1.29-r2 || =1.1.29-r3 || =1.1.30-r0 || =1.1.31-r0 || =1.1.32-r0 || =1.1.33-r0 || =1.1.33-r1 || =1.1.33-r2 || >=0 <1.1.33-r3 | 1.1.33-r3 |
alpine v3.11 | | =1.1.24-r0 || =1.1.24-r1 || =1.1.26-r0 || =1.1.26-r1 || =1.1.26-r2 || =1.1.26-r3 || =1.1.26-r4 || =1.1.26-r5 || =1.1.26-r6 || =1.1.26-r7 || =1.1.26-r8 || =1.1.26-r9 || =1.1.27-r0 || =1.1.27-r1 || =1.1.28-r0 || =1.1.28-r1 || =1.1.28-r2 || =1.1.29-r0 || =1.1.29-r1 || =1.1.29-r2 || =1.1.29-r3 || =1.1.30-r0 || =1.1.31-r0 || =1.1.32-r0 || =1.1.33-r0 || =1.1.33-r1 || >=0 <1.1.34-r0 | 1.1.34-r0 |
alpine v3.12 | | =1.1.24-r0 || =1.1.24-r1 || =1.1.26-r0 || =1.1.26-r1 || =1.1.26-r2 || =1.1.26-r3 || =1.1.26-r4 || =1.1.26-r5 || =1.1.26-r6 || =1.1.26-r7 || =1.1.26-r8 || =1.1.26-r9 || =1.1.27-r0 || =1.1.27-r1 || =1.1.28-r0 || =1.1.28-r1 || =1.1.28-r2 || =1.1.29-r0 || =1.1.29-r1 || =1.1.29-r2 || =1.1.29-r3 || =1.1.30-r0 || =1.1.31-r0 || =1.1.32-r0 || =1.1.33-r0 || =1.1.33-r1 || >=0 <1.1.34-r0 | 1.1.34-r0 |
alpine v3.13 | | =1.1.24-r0 || =1.1.24-r1 || =1.1.26-r0 || =1.1.26-r1 || =1.1.26-r2 || =1.1.26-r3 || =1.1.26-r4 || =1.1.26-r5 || =1.1.26-r6 || =1.1.26-r7 || =1.1.26-r8 || =1.1.26-r9 || =1.1.27-r0 || =1.1.27-r1 || =1.1.28-r0 || =1.1.28-r1 || =1.1.28-r2 || =1.1.29-r0 || =1.1.29-r1 || =1.1.29-r2 || =1.1.29-r3 || =1.1.30-r0 || =1.1.31-r0 || =1.1.32-r0 || =1.1.33-r0 || =1.1.33-r1 || >=0 <1.1.34-r0 | 1.1.34-r0 |
alpine v3.14 | | =1.1.24-r0 || =1.1.24-r1 || =1.1.26-r0 || =1.1.26-r1 || =1.1.26-r2 || =1.1.26-r3 || =1.1.26-r4 || =1.1.26-r5 || =1.1.26-r6 || =1.1.26-r7 || =1.1.26-r8 || =1.1.26-r9 || =1.1.27-r0 || =1.1.27-r1 || =1.1.28-r0 || =1.1.28-r1 || =1.1.28-r2 || =1.1.29-r0 || =1.1.29-r1 || =1.1.29-r2 || =1.1.29-r3 || =1.1.30-r0 || =1.1.31-r0 || =1.1.32-r0 || =1.1.33-r0 || =1.1.33-r1 || >=0 <1.1.34-r0 | 1.1.34-r0 |
alpine v3.15 | | =1.1.24-r0 || =1.1.24-r1 || =1.1.26-r0 || =1.1.26-r1 || =1.1.26-r2 || =1.1.26-r3 || =1.1.26-r4 || =1.1.26-r5 || =1.1.26-r6 || =1.1.26-r7 || =1.1.26-r8 || =1.1.26-r9 || =1.1.27-r0 || =1.1.27-r1 || =1.1.28-r0 || =1.1.28-r1 || =1.1.28-r2 || =1.1.29-r0 || =1.1.29-r1 || =1.1.29-r2 || =1.1.29-r3 || =1.1.30-r0 || =1.1.31-r0 || =1.1.32-r0 || =1.1.33-r0 || =1.1.33-r1 || >=0 <1.1.34-r0 | 1.1.34-r0 |
alpine v3.16 | | =1.1.24-r0 || =1.1.24-r1 || =1.1.26-r0 || =1.1.26-r1 || =1.1.26-r2 || =1.1.26-r3 || =1.1.26-r4 || =1.1.26-r5 || =1.1.26-r6 || =1.1.26-r7 || =1.1.26-r8 || =1.1.26-r9 || =1.1.27-r0 || =1.1.27-r1 || =1.1.28-r0 || =1.1.28-r1 || =1.1.28-r2 || =1.1.29-r0 || =1.1.29-r1 || =1.1.29-r2 || =1.1.29-r3 || =1.1.30-r0 || =1.1.31-r0 || =1.1.32-r0 || =1.1.33-r0 || =1.1.33-r1 || >=0 <1.1.34-r0 | 1.1.34-r0 |
alpine v3.17 | | =1.1.24-r0 || =1.1.24-r1 || =1.1.26-r0 || =1.1.26-r1 || =1.1.26-r2 || =1.1.26-r3 || =1.1.26-r4 || =1.1.26-r5 || =1.1.26-r6 || =1.1.26-r7 || =1.1.26-r8 || =1.1.26-r9 || =1.1.27-r0 || =1.1.27-r1 || =1.1.28-r0 || =1.1.28-r1 || =1.1.28-r2 || =1.1.29-r0 || =1.1.29-r1 || =1.1.29-r2 || =1.1.29-r3 || =1.1.30-r0 || =1.1.31-r0 || =1.1.32-r0 || =1.1.33-r0 || =1.1.33-r1 || >=0 <1.1.34-r0 | 1.1.34-r0 |
