Summary
[1.1.34-14.0.1.el9_8.1]
- Fix memory leak in exclPrefixPush [Orabug: 37871881]
- Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball
[1.1.34-14.1]
- Fix CVE-2025-10911 (RHEL-171991)
[1.1.34-14.1]
- Fix upgrade path for CVE-2023-40403 (RHEL-82213)
[1.1.34-12.1]
- Fix CVE-2023-40403 (RHEL-82213)
[1.1.34-12]
- Include alloc changes into previous patch (RHEL-83514)
[1.1.34-11]
- Fix CVE-2024-55549 (RHEL-83514)
[1.1.34-10]
- Fix CVE-2025-24855 (RHEL-83500)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | libxslt | 0:1.1.34-14.0.1.el9_8.1 |
| Oracle Linux · 9 | libxslt-devel | 0:1.1.34-14.0.1.el9_8.1 |
Vulnerabilities 1
-
Medium 5.5
Libxslt: use-after-free with key data stored cross-rvt
A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.