Red Hat Security Advisory

RHSA-2026:28584

libxslt security update

Released 2026-06-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) libxslt-1.1.39-8.el10_2.1, libxslt-devel-1.1.39-8.el10_2.1

Fixes 1 record

TI-2025-09991 CVE-2025-10911 · GHSA-g23f-vwrr-7m5p

Libxslt: use-after-free with key data stored cross-rvt

LOW 24

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00173 Published 2025-09-25 Partial fix · 1.1.39-8.el10_2.1, 1.1.39-8.el10_0.1 +13 CWE-825