libxslt: some CVEs not fixed in debian buster
Hi,
CVE-2019-5815 and CVE-2021-30560 are vulnerabilities of libxslt
included in chromium source code as third-party code.
And not only chromium but also libxslt upstream has already fixed them.
https://gitlab.gnome.org/GNOME/libxslt/-/commit/08b62c258
https://gitlab.gnome.org/GNOME/libxslt/-/commit/50f9c9cd3
Because libxslt in debian buster is older than the fixed version in
upstream, these bugs are still present in debian buster.
Is there any plans to fix them in debian buster ?
(I am wonder why these CVEs are linked to only chromium, not libxslt.)
Reply to: