Red Hat Security Advisory

RHSA-2026:30847

libxslt security update

Released 2026-06-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.6) libxslt-devel-1.1.32-8.el8_6.1
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) libxslt-devel-1.1.32-8.el8_6.1
Red Hat Enterprise Linux BaseOS AUS (v.8.6) libxslt-1.1.32-8.el8_6.1
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) libxslt-1.1.32-8.el8_6.1

Fixes 1 record

TI-2025-09991 CVE-2025-10911 · GHSA-g23f-vwrr-7m5p

Libxslt: use-after-free with key data stored cross-rvt

LOW 24

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00173 Published 2025-09-25 Partial fix · 1.1.39-8.el10_2.1, 1.1.39-8.el10_0.1 +13 CWE-825