Security update for libxml2

This update for libxml2 fixes the following issues: CVE-2025-6021: Integer Overflow in xmlBuildQName Leads to Stack Buffer Overflow in libxml2 bsc1244580 CVE-2025-6170: stack buffer overflow may lead to a crash bsc1244700 CVE-2025-7425: Heap Use-After-Free in libxslt caused by atype corruption in...

SUSE-SU-2025:20564-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2025-6021: Integer Overflow in xmlBuildQName Leads to Stack Buffer Overflow in libxml2 bsc1244580 - CVE-2025-6170: stack buffer overflow may lead to a crash bsc1244700 - CVE-2025-7425: Heap Use-After-Free in libxslt caused by atype...

TencentOS Server 3: libxml2 (TSSA-2025:0696)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0696 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Debian: Security Advisory (DSA-5979-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2025-1755617495 libxslt: Fix of CVE-2024-55549

CVE-2024-55549: fix use-after-free issue related to exclusion of result prefixes...

[SECURITY] [DSA 5979-1] libxslt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5979-1 [email protected] https://www.debian.org/security/ Aron Xu August 19, 2025 https://www.debian.org/security/faq -...

Important: libxslt

Issue Overview: A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may le...

Amazon Linux 2 : libxslt (ALAS-2025-2966)

The version of libxslt installed on the remote host is prior to 1.1.28-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2966 advisory. A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead t...

Debian dsa-5979 : libxslt1-dev - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5979 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5979-1 [email protected]...

DSA-5979-1 libxslt - security update

Bulletin has no description...

Security update for libxslt

This update for libxslt fixes the following issues: CVE-2025-7424: Fixed type confusion in xmlNode.psvi between stylesheet and source nodes bsc1246360 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2025:20556-1 Security update for libxslt

This update for libxslt fixes the following issues: - CVE-2025-7424: Fixed type confusion in xmlNode.psvi between stylesheet and source nodes bsc1246360...

SUSE-SU-2025:02758-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2025-7425: Fixed heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr bsc1246296...

ROOT-OS-DEBIAN-12-CVE-2025-7424 CVE-2025-7424 in rootio-libxslt - Patched by Root

Root has patched CVE-2025-7424 in the rootio-libxslt package for Root:Debian:12. Multiple fixed versions available...

K000152944: libxslt vulnerability CVE-2025-24855, CVE-2024-55549

Security Advisory Description CVE-2025-24855 numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and...

Linux Distros Unpatched Vulnerability : CVE-2024-55549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes. CVE-2024-55549 Note that Nessus relies on th...

CLSA-2025-1754649907 libxml2: Fix of CVE-2025-7425

CVE-2025-7425: fix attribute type modification in libxslt to prevent memory corruption...

Important: libxslt

Issue Overview: A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may le...

libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may acce...

libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may acce...