Summary
[1.1.28-6.0.3]
- Fix CVE-2024-55549 issue due to memory leak [Orabug: 37795485]
- Fix CVE-2025-24855 issue due to use after free.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libxslt | 0:1.1.28-6.0.3.el7 |
| Oracle Linux · 7 | libxslt-devel | 0:1.1.28-6.0.3.el7 |
| Oracle Linux · 7 | libxslt-python | 0:1.1.28-6.0.3.el7 |
Vulnerabilities 2
-
High 7.8
xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.
-
High 7.8
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can…