Medium ELSA-2026-28584 1 CVE

Moderate: libxslt security update (Oracle Linux 10)

Published Jul 16, 2026 · Updated Jul 16, 2026

Ecosystem: Oracle Linux

Summary

[1.1.39-8.1]
- Fix CVE-2025-10911 (RHEL-171996)

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 10	libxslt	0:1.1.39-8.el10_2.1
Oracle Linux · 10	libxslt-devel	0:1.1.39-8.el10_2.1

Vulnerabilities 1

Medium 5.5

CVE-2025-10911

Libxslt: use-after-free with key data stored cross-rvt

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine Wolfi

Sep 25, 2025