High ELSA-2025-3107 1 CVE

Important: libxslt security update (Oracle Linux 9)

Published Mar 24, 2025 · Updated Mar 24, 2025

Ecosystem: Oracle Linux

Summary

[1.1.34-9.0.1.el9_5.1]
- Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball

[1.1.34-9.1]
- Fix CVE-2025-24855 (RHEL-83501)

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	libxslt	0:1.1.34-9.0.1.el9_5.1
Oracle Linux · 9	libxslt-devel	0:1.1.34-9.0.1.el9_5.1

Vulnerabilities 1

High 7.8

CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can…

xmlsoft libxslt qt6-qtwebengine qt5-qtwebengine Debian Ubuntu Azure Linux Alpine Wolfi

Mar 14, 2025