Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 3

Vulnerabilities 3

• High 7.5
  CVE-2025-7424

  Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

  A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In…

  Red Hat GNOME Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  Jul 10, 2025
• Medium 5.5
  CVE-2025-10911

  Libxslt: use-after-free with key data stored cross-rvt

  A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Sep 25, 2025
• Low 3.1
  CVE-2025-11731

  Libxslt: type confusion in exsltfuncresultcompfunction of libxslt

  A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a t…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Oct 14, 2025

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2025-7424
• article
  https://access.redhat.com/security/updates/classification/
• report
  https://access.redhat.com/security/cve/CVE-2025-10911
• report
  https://access.redhat.com/security/cve/CVE-2025-11731
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11015.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2379228
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-7424
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-7424
• article
  https://gitlab.gnome.org/GNOME/libxslt/-/issues/139
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2397838
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-10911
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-10911
• article
  https://gitlab.gnome.org/GNOME/libxslt/-/issues/144
• article
  https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/77
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2403688
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-11731
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-11731
• article
  https://gitlab.gnome.org/GNOME/libxslt/-/issues/151
• article
  https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/78