CVE-2015-9019
Fixed in a distro release EPSS 2%
In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs.
Products: xmlsoft libxslt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libxslt | no fix |
| Debian 13 | libxslt | no fix |
| Debian 14 | libxslt | no fix |
| SUSE Linux Enterprise Desktop 12 SP1 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server 11 SP4 | libxslt | 1.1.24-19.33.1 |
| SUSE Linux Enterprise Server 12 SP1 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server 12 SP2 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | libxslt | 1.1.24-19.33.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libxslt | 1.1.24-19.33.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libxslt-python | 1.1.24-19.33.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | libxslt | 1.1.28-16.1 |
| Ubuntu 22.04 LTS | libxslt | no fix |
| Ubuntu Pro 14.04 LTS | libxslt | no fix |
| Ubuntu Pro 16.04 LTS | libxslt | no fix |
| Ubuntu Pro 18.04 LTS | libxslt | no fix |
| Ubuntu Pro 20.04 LTS | libxslt | no fix |
| openSUSE Tumbleweed | libxslt | 1.1.34-3.2 |