[ALSA-2025:3615] Important: libxslt security update
Type:
security
Severity:
important
Release date:
2025-04-07
Description:
libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. Security Fix(es): * libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855) * libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 libxslt-1.1.32-6.1.el8_10.aarch64.rpm 197ea2a93daf23c373d169f8d720b9d8e50c4a2b88d31aec46d1ac7536ddad84
aarch64 libxslt-devel-1.1.32-6.1.el8_10.aarch64.rpm f165d717c86e5594f144c90bba7d3e4038f8fb8699aa8045c1c9b74e99c5198c
i686 libxslt-devel-1.1.32-6.1.el8_10.i686.rpm 485b9a153d2902bb11c54095bad928c44da82b48dd583469af5e97d59a0c3d8c
i686 libxslt-1.1.32-6.1.el8_10.i686.rpm ee69fa1e23ab51a571824d9adfa6fae5bb58bb5f93ba83bc969e9e43940bd107
ppc64le libxslt-devel-1.1.32-6.1.el8_10.ppc64le.rpm d4cc5f9d2170b05e0e55cb819c89fe96b8475c3898e9d9fef5c8a35d4a65955d
ppc64le libxslt-1.1.32-6.1.el8_10.ppc64le.rpm d8f0af9738f31fa8ab169729c5cbad3a3c84db11454af9e6497c822c2354c82b
s390x libxslt-1.1.32-6.1.el8_10.s390x.rpm 58b9eb024d0936aba7cb08a6e350096c4eab4426fa2111fd4a203c0ca8539269
s390x libxslt-devel-1.1.32-6.1.el8_10.s390x.rpm 82db45eb78d7c5f1563f75c6f3e247ba9ac84670117b9588cba7e86f3fc4a5c1
x86_64 libxslt-1.1.32-6.1.el8_10.x86_64.rpm a40bbbda188bada9ec28636b78bb6be6afd1bace81a8d1140d917aa84b537bf6
x86_64 libxslt-devel-1.1.32-6.1.el8_10.x86_64.rpm c0e20e473a715c30cc6829aab6b41d02ffbd7bc137dc2bbb4c6862df07b5e5fd
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.