Red Hat Security Advisory

RHSA-2026:29811

libxslt security update

Released 2026-06-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) libxslt-1.1.34-12.el9_2, libxslt-devel-1.1.34-12.el9_2

Fixes 2 records

TI-2023-21222 CVE-2023-40403 · GHSA-j822-w26r-9cxf

Apple iOS and iPadOS: Processing web content may disclose sensitive information

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01327 Published 2023-09-26 Partial fix · 17, 12.7 +4

TI-2025-09991 CVE-2025-10911 · GHSA-g23f-vwrr-7m5p

Libxslt: use-after-free with key data stored cross-rvt

LOW 24

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00173 Published 2025-09-25 Partial fix · 1.1.39-8.el10_2.1, 1.1.39-8.el10_0.1 +13 CWE-825