Summary
Ivan Fratric discovered that Libxslt was vulnerable to type confusion when
performing XML transformations. An attacker could possibly use this issue
to cause Libxslt to crash or corrupt memory, causing a denial of service or
undefined behavior.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | libxslt | 1.1.34-4ubuntu0.22.04.5 |
| Ubuntu · 24.04 LTS 24.04:LTS | libxslt | 1.1.39-0exp1ubuntu0.24.04.3 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libxslt | 1.1.28-2ubuntu0.2+esm5 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libxslt | 1.1.28-2.1ubuntu0.3+esm4 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libxslt | 1.1.29-5ubuntu0.3+esm3 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | libxslt | 1.1.34-4ubuntu0.20.04.3+esm2 |
References
-
report
https://ubuntu.com/security/CVE-2025-7424