Skip to content
OpenAdvisories
Medium ALAS2-2025-2831 1 CVE

Moderate: libxslt security update (Amazon Linux 2)

Published Apr 9, 2025 · Updated Apr 16, 2025

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-40403: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2 libxslt 0:1.1.28-6.amzn2.0.4
Amazon Linux · 2 libxslt-debuginfo 0:1.1.28-6.amzn2.0.4
Amazon Linux · 2 libxslt-devel 0:1.1.28-6.amzn2.0.4
Amazon Linux · 2 libxslt-python 0:1.1.28-6.amzn2.0.4

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-40403.html