Red Hat Security AdvisoryRHSA-2025:4098
libxslt security update
Released 2025-04-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7 ELS) libxslt-1.1.28-9.el7_9, libxslt-1.1.28-9.el7_9.ppc, libxslt-devel-1.1.28-9.el7_9 +1
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) libxslt-python-1.1.28-9.el7_9
Fixes 2 records
Priority HIGH 67
xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00358 · Published 2025-03-14 · Partial fix · 1.1.43 CWE-416
Priority LOW 36
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00358 · Published 2025-03-14 · Partial fix · 1.1.43 CWE-416
