Security Bulletin: IBM Guardium Data Protection is affected by a security vulnerability (CVE-2025-10911)

Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2025-10911 DESCRIPTION: A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash...

CLSA-2026-1792507096 libxslt: Fix of 6 CVEs

CVE-2019-11068: fix security framework bypass in xsltCheckRead and xsltCheckWrite callers - CVE-2019-18197: fix dangling pointer in xsltCopyText - CVE-2019-5815: always set context node before calling XPath iterators - CVE-2021-30560: fix use-after-free in xsltApplyTemplates - CVE-2024-55549: fix...

Astra Linux – Vulnerability in libxml2

In libxml2 versions before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer do not check for integer overflows. This can lead to out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software that uses libxml2’s...

Astra Linux – Vulnerability in libxslt

In numbers.c in libxslt before version 1.1.43, there is a use-after-free issue. This occurs because, in nested XPath evaluations, an XPath context node can be modified but cannot be restored. This issue is related to the functions xsltNumberFormatGetValue, xsltEvalXPathPredicate,...

ROOT-OS-DEBIAN-13-CVE-2025-10911 CVE-2025-10911 in libxslt - Patched by Root

Root has patched CVE-2025-10911 in the libxslt package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-10911 CVE-2025-10911 in libxslt - Patched by Root

Root has patched CVE-2025-10911 in the libxslt package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2015-9019 CVE-2015-9019 in libxslt - Patched by Root

Root has patched CVE-2015-9019 in the libxslt package for Root:Debian:12. Multiple fixed versions available...

[SECURITY] Fedora 45 Update: libxslt-1.1.43-10.fc45

This C library allows to transform XML files into other XML files or HTML, text, ... using the standard XSLT stylesheet transformation mechanism. To use it you need to have a version of libxml2 =3D 2.6.27 installed. The xsltproc command is a command line interface to the XSLT engine...

AlmaLinux 9.2 [TuxCare] Security Update: libxslt / libxslt-devel (ALMALINUX9.2:CLSA-2025:1745052086)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1745052086 advisory. - xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes. CVE-2024-55549 Note tha...

AlmaLinux 9.2 [TuxCare] Security Update: libxslt / libxslt-devel (ALMALINUX9.2:CLSA-2026:1783418975)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783418975 advisory. - A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and...

Rocky Linux 8.8 [CIQ] Security Update: libxslt / libxslt-debuginfo / libxslt-debugsource / libxslt-devel Multiple Vulnerabilities (ciqsa-2026_0379)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260379 advisory. This advisory aggregates security fixes for the libxslt SRPM in CIQ LTS 8.8. It addresses 2 CVEs: CVE-2025-24855, CVE-2024-55549. Tenable has extracted t...

Rocky Linux 9.2 [CIQ] Security Update: libxslt / libxslt-debuginfo / libxslt-debugsource / libxslt-devel Multiple Vulnerabilities (ciqsa-2026_0457)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260457 advisory. This advisory aggregates security fixes for the libxslt SRPM in CIQ LTS 9.2. It addresses 5 CVEs: CVE-2019-11068, CVE-2019-13117, CVE-2019-13118,...

Rocky Linux 10.2 [CIQ] Security Update: libxslt / libxslt-debuginfo / libxslt-debugsource / libxslt-devel (crlsa-2026_28584)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202628584 advisory. libxslt: use-after-free with key data stored cross-RVT CVE-2025-10911 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8 [CIQ] Security Update: libxslt / libxslt-debuginfo / libxslt-debugsource / libxslt-devel Multiple Vulnerabilities (crlsa-2025_3615)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20253615 advisory. libxslt: Use-After-Free in libxslt numbers.c CVE-2025-24855 libxslt: Use-After-Free in libxslt xsltGetInheritedNsList CVE-2024-55549 Tenable has extracted...

AlmaLinux 9.6 [TuxCare] Security Update: libxslt / libxslt-devel (ALMALINUX9.6:CLSA-2026:1782722295)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782722295 advisory. - A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and...

Rocky Linux 8 [CIQ] Security Update: libxslt / libxslt-debuginfo / libxslt-debugsource / libxslt-devel (crlsa-2025_8676)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20258676 advisory. libxslt: Processing web content may disclose sensitive information CVE-2023-40403 Tenable has extracted the preceding description block directly from the CIQ securi...

Rocky Linux 9 [CIQ] Security Update: libxslt / libxslt-debuginfo / libxslt-debugsource / libxslt-devel (crlsa-2026_6266)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20266266 advisory. libxslt: Processing web content may disclose sensitive information CVE-2023-40403 Tenable has extracted the preceding description block directly from the CIQ securi...

Rocky Linux 9.2 [CIQ] Security Update: libxslt / libxslt-debuginfo / libxslt-debugsource / libxslt-devel (ciqsa-2026_1177)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261177 advisory. This advisory aggregates security fixes for the libxslt SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2025-24855. Tenable has extracted the preceding description...

Rocky Linux 10.0 [CIQ] Security Update: libxslt / libxslt-debuginfo / libxslt-debugsource / libxslt-devel Multiple Vulnerabilities (crlsa-2025_7496)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20257496 advisory. libxslt: Use-After-Free in libxslt numbers.c CVE-2025-24855 libxslt: Use-After-Free in libxslt xsltGetInheritedNsList CVE-2024-55549 Tenable has extract...

CentOS Linux 7 [TuxCare] Security Update: libxslt / libxslt-devel / libxslt-python (CENTOS7:CLSA-2025:1743763948)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1743763948 advisory. - numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never...