[ALSA-2025:7496] Important: libxslt security update
Type:
security
Severity:
important
Release date:
2025-07-02
Description:
libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. Security Fix(es): * libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855) * libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 libxslt-devel-1.1.39-7.el10_0.aarch64.rpm 9c737214b726ab9b178fcee3918539aad325aee6f59a7c20e841c05fa87eb5cb
aarch64 libxslt-1.1.39-7.el10_0.aarch64.rpm d7b51fa958a2d1b803dbb9a5bc76914d3a9b6c3547cdbb92d1ba12bc48d77959
ppc64le libxslt-1.1.39-7.el10_0.ppc64le.rpm 21352a6f421c1f7fb64c958f5dddc2b6dde34ce962c719ae9cf9d37187c2f79e
ppc64le libxslt-devel-1.1.39-7.el10_0.ppc64le.rpm 97a833d69e9eb5c6120a8b7c0c0a0692dc2566c619b0bcbd73ca44e3b5c56aca
s390x libxslt-1.1.39-7.el10_0.s390x.rpm 3d8d3edefecadefd7e496a2b31dcd0d7ea29d00568bc019fe675fd808ffe34dc
s390x libxslt-devel-1.1.39-7.el10_0.s390x.rpm bd1cf4834949327abeb337eb4193e2cfecbf6800c3576205c496771f32f68c92
x86_64 libxslt-1.1.39-7.el10_0.x86_64.rpm 2e0c50ef3ccbc8de9b8c61b478b11b7ee7ade7e033c2bafc1cdfef289f6bea1d
x86_64 libxslt-devel-1.1.39-7.el10_0.x86_64.rpm 8c56dbbe4959104caf065fa0dd54ff6d6b1b134a6caa0c8a557b7467eeb710f5
x86_64_v2 libxslt-devel-1.1.39-7.el10_0.x86_64_v2.rpm 29b62c22236c4653cef723aaff6971d8bf04c461f4d808d7260accbdbc93ab6c
x86_64_v2 libxslt-1.1.39-7.el10_0.x86_64_v2.rpm aaf54683758d9ca4f2b288b3d1d14827626e2d0e3445edd61f9afe21c8c9ef3f
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.