Red Hat Security Advisory

RHSA-2026:29976

libxslt security update

Released 2026-06-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.8.8) libxslt-devel-1.1.32-8.el8_8.1
Red Hat Enterprise Linux AppStream TUS (v.8.8) libxslt-devel-1.1.32-8.el8_8.1
Red Hat Enterprise Linux BaseOS E4S (v.8.8) libxslt-1.1.32-8.el8_8.1
Red Hat Enterprise Linux BaseOS TUS (v.8.8) libxslt-1.1.32-8.el8_8.1

Fixes 1 record

TI-2025-09991 CVE-2025-10911 · GHSA-g23f-vwrr-7m5p

Libxslt: use-after-free with key data stored cross-rvt

LOW 24

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00173 Published 2025-09-25 Partial fix · 1.1.39-8.el10_2.1, 1.1.39-8.el10_0.1 +13 CWE-825