High DLA-4309-1 2 CVEs

libxslt - security update

Published Sep 25, 2025 · Updated Sep 25, 2025

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	libxslt	1.1.34-4+deb11u3

Vulnerabilities 2

High 7.5

CVE-2025-7424

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In…

Red Hat GNOME Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux

Jul 10, 2025
Unscored —

CVE-2023-40403

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and…

Apple macOS iOS and iPadOS watchOS macOS iOS Debian Ubuntu

Sep 26, 2023