Red Hat Security AdvisoryRHSA-2025:3625
libxslt security update
Released 2025-04-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) libxslt-devel-1.1.32-8.el8_6
- Red Hat Enterprise Linux AppStream E4S (v.8.6) libxslt-devel-1.1.32-8.el8_6
- Red Hat Enterprise Linux AppStream TUS (v.8.6) libxslt-devel-1.1.32-8.el8_6
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) libxslt-1.1.32-8.el8_6
- Red Hat Enterprise Linux BaseOS E4S (v.8.6) libxslt-1.1.32-8.el8_6
- Red Hat Enterprise Linux BaseOS TUS (v.8.6) libxslt-1.1.32-8.el8_6
Fixes 2 records
Priority HIGH 67
xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00358 · Published 2025-03-14 · Partial fix · 1.1.43 CWE-416
Priority LOW 36
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00358 · Published 2025-03-14 · Partial fix · 1.1.43 CWE-416
