CVE-2016-4612

Publication date 22 July 2016

Last updated 4 August 2025

Ubuntu priority

Medium

Why this priority?

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-1683. Reason: This candidate is a reservation duplicate of CVE-2016-1683. Notes: All CVE users should reference CVE-2016-1683 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Read the notes from the security team

Status

Package Ubuntu Release Status
libxslt 17.04 zesty
Not affected
16.10 yakkety
Not affected
16.04 LTS xenial
Fixed 1.1.28-2.1ubuntu0.1
15.10 wily Ignored end of life
14.04 LTS trusty
Fixed 1.1.28-2ubuntu0.1
12.04 LTS precise
Fixed 1.1.26-8ubuntu1.4

Notes

sbeattie

may be https://bugzilla.gnome.org/show_bug.cgi?id=765380 or https://bugzilla.gnome.org/show_bug.cgi?id=765271 and possibly addressed in 1.1.29; similar for CVE-2016-4612. fixes would be: https://git.gnome.org/browse/libxslt/commit/?id=5d0c6565bab5b9b7efceb33b626916d22b4101a7 https://git.gnome.org/browse/libxslt/commit/?id=d8862309f08054218b28e2c8f5fb3cb2f650cac7 given the above, these were fixed in the upstream 1.1.29 release

sbettie

incorporated patches into USN 3271-1