Red Hat Security Advisory

RHSA-2026:26355

libxslt security update

Released 2026-06-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) libxslt-devel-1.1.32-6.4.el8_10
Red Hat Enterprise Linux BaseOS (v. 8) libxslt-1.1.32-6.4.el8_10

Fixes 1 record

TI-2025-09991 CVE-2025-10911 · GHSA-g23f-vwrr-7m5p

Libxslt: use-after-free with key data stored cross-rvt

LOW 24

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00173 Published 2025-09-25 Partial fix · 1.1.39-8.el10_2.1, 1.1.39-8.el10_0.1 +13 CWE-825