Red Hat Security Advisory

RHSA-2026:11015

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-04-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images libxslt-1.1.45-0.1.hum1@aarch64, libxslt-1.1.45-0.1.hum1@src, libxslt-1.1.45-0.1.hum1@x86_64 +4

Fixes 3 records

TI-2025-06765 CVE-2025-7424 · GHSA-w4gx-392p-5m58

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

LOW 35

A flaw was found in the libxslt library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01301 Published 2025-07-10 Partial fix · 1.1.44, 1.1.39-8.el10_0 +1 CWE-843

TI-2025-09991 CVE-2025-10911 · GHSA-g23f-vwrr-7m5p

Libxslt: use-after-free with key data stored cross-rvt

LOW 24

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00173 Published 2025-09-25 Partial fix · 1.1.39-8.el10_2.1, 1.1.39-8.el10_0.1 +13 CWE-825

TI-2025-10756 CVE-2025-11731 · GHSA-9f23-58rv-2hx4

Libxslt: type confusion in exsltfuncresultcompfunction of libxslt

LOW 15

A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during stylesheet parsing.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00283 Published 2025-10-14 Partial fix · 1.1.44, 1.1.45-0.1.hum1 CWE-843