Libxslt: use-after-free with key data stored cross-rvt
CVE-2025-10911 is fixed in 19 products on 1 platform, first by RHSA-2026:29809, released August 4, 2025. It is not reported as exploited. Patch Radar priority: Routine.
This update for libxml2 fixes the following issues: - CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811) - CVE-2026-0992: Fixed an excessive resource consumption when processing XML catalogs due to exponential behavior. (bsc#1256809, bsc#1256812) - CVE-2026-1757: Fixed a memory leak in the `xmllint` interactive shell. (bsc#1257594, bsc#1257595) - CVE-2025-10911: Fixed a use-after-free with key data stored cross-RVT. (bsc#1250553) - CVE-2025-8732: Fixed an infinite recursion in catalog parsing functions when processing malformed SGML catalog files. (bsc#1247858) - CVE-2026-0989: Fixe a call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth. (bsc#1256805, bsc#1256810)
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libxml2 · opensuse-leap 15.6 | 2.10.3-150500.5.38.1 | SUSE-SU-2026:0570-1 | Feb 17, 2026 |
| libxml2 · opensuse-leap 16.0 | 2.13.8-160000.4.1 | OPENSUSE-SU-2026:20312-1 | Mar 4, 2026 |
| libxml2 · sles 15.7 | 2.12.10-150700.4.11.1 | SUSE-SU-2026:0605-1 | Feb 24, 2026 |
| libxml2 · sles 16.0 | 2.13.8-160000.4.1 | SUSE-SU-2026:20631-1 | Mar 4, 2026 |
| libxml2-python · opensuse-leap 15.6 | 2.10.3-150500.5.38.1 | SUSE-SU-2026:0570-1 | Feb 17, 2026 |
| libxml2-python · opensuse-leap 16.0 | 2.13.8-160000.4.1 | OPENSUSE-SU-2026:20312-1 | Mar 4, 2026 |
| libxml2-python · sles 15.7 | 2.12.10-150700.4.11.1 | SUSE-SU-2026:0605-1 | Feb 24, 2026 |
| libxml2-python · sles 16.0 | 2.13.8-160000.4.1 | SUSE-SU-2026:20631-1 | Mar 4, 2026 |
| libxslt · Debian 14 | 1.1.43-0.3 | DEBIAN-CVE-2025-10911 | Sep 25, 2025 |
| libxslt · RHEL 10 | 1.1.39-8.el10_0.1 | RHSA-2026:29809 | Aug 4, 2025 |
| libxslt · RHEL 8 | 0:1.1.32-6.4.el8_10 | RHSA-2026:26355 | Jun 24, 2026 |
| libxslt · RHEL 9 | 0:1.1.34-14.el9_8.1 | RHSA-2026:28243 | Jun 24, 2026 |
| libxslt · almalinux 10 | 1.1.39-8.el10_2.1 | ALSA-2026:28584 | Jun 23, 2026 |
| libxslt · almalinux 8 | 1.1.32-6.4.el8_10 | ALSA-2026:26355 | Jun 16, 2026 |
| libxslt · almalinux 9 | 1.1.34-14.el9_8.1 | ALSA-2026:28243 | Jun 23, 2026 |
| libxslt · amzn 2023 | 1.1.43-1.amzn2023.0.3 | ALAS2023-2025-1228 | Oct 27, 2025 |
| libxslt · ol 10 | 0:1.1.39-8.el10_2.1 | ELSA-2026-28584 | Jul 16, 2026 |
| libxslt · ol 8 | 0:1.1.32-6.4.0.1.el8_10 | ELSA-2026-26355 | Jun 16, 2026 |
| libxslt · ol 9 | 0:1.1.34-14.0.1.el9_8.1 | ELSA-2026-28243 | Jun 23, 2026 |
| libxslt · opensuse-leap 15.6 | 1.1.34-150400.3.16.1 | SUSE-SU-2026:0801-1 | Mar 4, 2026 |
| libxslt · opensuse-leap 15.6 | 1.1.34-150400.3.13.1 | SUSE-SU-2025:3875-1 | Oct 30, 2025 |
| libxslt · opensuse-leap 16.0 | 1.1.43-160000.4.1 | OPENSUSE-SU-2026:20312-1 | Mar 4, 2026 |
| libxslt · rocky 10 | 0:1.1.39-8.el10_2.1 | RLSA-2026:28584 | Jun 25, 2026 |
| libxslt · rocky 8 | 0:1.1.32-6.4.el8_10 | RLSA-2026:26355 | Jun 17, 2026 |
| libxslt · rocky 9 | 0:1.1.34-14.el9_7.1 | RLSA-2026:28243 | Jun 24, 2026 |
| libxslt · sles 15.6 | 1.1.34-150400.3.13.1 | SUSE-SU-2025:3875-1 | Oct 30, 2025 |
| libxslt · sles 15.7 | 1.1.34-150400.3.16.1 | SUSE-SU-2026:0801-1 | Mar 4, 2026 |
| libxslt · sles 15.7 | 1.1.34-150400.3.13.1 | SUSE-SU-2025:3875-1 | Oct 30, 2025 |
| libxslt · sles 16.0 | 1.1.43-160000.4.1 | SUSE-SU-2026:20631-1 | Mar 4, 2026 |
| libxslt-debuginfo · amzn 2023 | 1.1.43-1.amzn2023.0.3 | ALAS2023-2025-1228 | Oct 27, 2025 |
| libxslt-debugsource · amzn 2023 | 1.1.43-1.amzn2023.0.3 | ALAS2023-2025-1228 | Oct 27, 2025 |
| libxslt-devel · RHEL 8 | 0:1.1.32-6.4.el8_10 | RHSA-2026:26355 | Jun 24, 2026 |
| libxslt-devel · RHEL 9 | 0:1.1.34-14.el9_8.1 | RHSA-2026:28243 | Jun 24, 2026 |
| libxslt-devel · almalinux 10 | 1.1.39-8.el10_2.1 | ALSA-2026:28584 | Jun 23, 2026 |
| libxslt-devel · almalinux 8 | 1.1.32-6.4.el8_10 | ALSA-2026:26355 | Jun 16, 2026 |
| libxslt-devel · almalinux 9 | 1.1.34-14.el9_8.1 | ALSA-2026:28243 | Jun 23, 2026 |
| libxslt-devel · amzn 2023 | 1.1.43-1.amzn2023.0.3 | ALAS2023-2025-1228 | Oct 27, 2025 |
| libxslt-devel · ol 10 | 0:1.1.39-8.el10_2.1 | ELSA-2026-28584 | Jul 16, 2026 |
| libxslt-devel · ol 8 | 0:1.1.32-6.4.0.1.el8_10 | ELSA-2026-26355 | Jun 16, 2026 |
| libxslt-devel · ol 9 | 0:1.1.34-14.0.1.el9_8.1 | ELSA-2026-28243 | Jun 23, 2026 |
| libxslt-python · opensuse-leap 15.6 | 1.1.32-150000.3.25.1 | SUSE-SU-2025:03595-1 | Oct 14, 2025 |
| libxslt1.1 · Ubuntu 26.04.1 LTS (resolute) | 1.1.43-0.3 | libxslt1.1 1.1.43-0.3 | Oct 13, 2025 |
| mingw-libxslt · Fedora 43 | 1.1.43-4.fc43 | FEDORA-2026-84BE018D47 | Jan 13, 2026 |
| mingw32-libxslt · Fedora 43 | 1.1.43-4.fc43 | FEDORA-2026-84BE018D47 | Jan 13, 2026 |
| mingw32-libxslt-debuginfo · Fedora 43 | 1.1.43-4.fc43 | FEDORA-2026-84BE018D47 | Jan 13, 2026 |
| mingw32-libxslt-static · Fedora 43 | 1.1.43-4.fc43 | FEDORA-2026-84BE018D47 | Jan 13, 2026 |
| mingw64-libxslt · Fedora 43 | 1.1.43-4.fc43 | FEDORA-2026-84BE018D47 | Jan 13, 2026 |
| mingw64-libxslt-debuginfo · Fedora 43 | 1.1.43-4.fc43 | FEDORA-2026-84BE018D47 | Jan 13, 2026 |
| mingw64-libxslt-static · Fedora 43 | 1.1.43-4.fc43 | FEDORA-2026-84BE018D47 | Jan 13, 2026 |
| python-libxml2-python · opensuse-leap 15.6 | 2.9.7-150000.3.94.1 | SUSE-SU-2026:0568-1 | Feb 17, 2026 |
| python3-libxslt · amzn 2023 | 1.1.43-1.amzn2023.0.3 | ALAS2023-2025-1228 | Oct 27, 2025 |
| python3-libxslt-debuginfo · amzn 2023 | 1.1.43-1.amzn2023.0.3 | ALAS2023-2025-1228 | Oct 27, 2025 |
| xsltproc · Ubuntu 26.04.1 LTS (resolute) | 1.1.43-0.3 | xsltproc 1.1.43-0.3 | Oct 13, 2025 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.