Libxslt: type confusion in exsltfuncresultcompfunction of libxslt

...

SUSE-SU-2025:20892-1 Security update for libxslt

This update for libxslt fixes the following issues: - CVE-2025-11731: type confusion in exsltFuncResultCompfunction leading to denial of service bsc1251979 - CVE-2025-10911: use-after-free with key data stored cross-RVT bsc1250553...

CVE-2025-11731 Libxslt: type confusion in exsltfuncresultcompfunction of libxslt

A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads...