Skip to content
OpenAdvisories
Medium ALAS2023-2025-905 1 CVE

Moderate: libxslt security update (Amazon Linux 2023)

Published Mar 13, 2025 · Updated Mar 26, 2025

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-40403: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.

Fixed packages 6

ReleasePackageFixed in
Amazon Linux · 2023 libxslt 0:1.1.42-3.amzn2023
Amazon Linux · 2023 libxslt-debuginfo 0:1.1.42-3.amzn2023
Amazon Linux · 2023 libxslt-debugsource 0:1.1.42-3.amzn2023
Amazon Linux · 2023 libxslt-devel 0:1.1.42-3.amzn2023
Amazon Linux · 2023 python3-libxslt 0:1.1.42-3.amzn2023
Amazon Linux · 2023 python3-libxslt-debuginfo 0:1.1.42-3.amzn2023

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-40403.html