# CVE-2023-40403: libxslt: This update for libxslt fixes the following issues: - CVE-2023-40403: Fixed sensitive information disclosure during... CVE-2023-40403 is fixed in 10 products on 1 platform, first by libxslt1.1 1.1.29-5ubuntu0.3+esm1, released September 27, 2023. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2023-40403 - Priority: Routine - CVSS: 6.5 (Moderate) - EPSS: 0.0133 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Sep 27, 2023 ## Description This update for libxslt fixes the following issues: - CVE-2023-40403: Fixed sensitive information disclosure during processing web content (bsc#1238591) - CVE-2024-55549: Fixed use-after-free in xsltGetInheritedNsList (bsc#1239637) - CVE-2025-24855: Fixed use-after-free in numbers.c (bsc#1239625) ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | libxslt Debian 11.6 (bullseye) | 1.1.34-4+deb11u3 | [DLA-4309-1](https://patchblox.com/security/data/fix/linux/dla-4309-1.md) | Sep 25, 2025 | | Linux | libxslt Debian 12.15 (bookworm) | 1.1.35-1+deb12u2 | [DSA-5979-1](https://patchblox.com/security/data/fix/linux/dsa-5979-1.md) | Aug 19, 2025 | | Linux | libxslt Debian 13.5 (trixie) | 1.1.35-1.2+deb13u1 | [DSA-5979-1](https://patchblox.com/security/data/fix/linux/dsa-5979-1.md) | Aug 19, 2025 | | Linux | libxslt Debian 14 | 1.1.35-2 | [DEBIAN-CVE-2023-40403](https://patchblox.com/security/data/fix/linux/debian-cve-2023-40403.md) | Sep 27, 2023 | | Linux | libxslt RHEL 8 | 0:1.1.32-6.2.el8_10 | [RHSA-2025:8676](https://patchblox.com/security/data/fix/linux/rhsa-2025-8676.md) | Jun 9, 2025 | | Linux | libxslt RHEL 9 | 0:1.1.34-14.el9_7.1 | [RHSA-2026:6266](https://patchblox.com/security/data/fix/linux/rhsa-2026-6266.md) | Apr 15, 2026 | | Linux | libxslt almalinux 8 | 1.1.32-6.2.el8_10 | [ALSA-2025:8676](https://patchblox.com/security/data/fix/linux/alsa-2025-8676.md) | Jun 9, 2025 | | Linux | libxslt almalinux 9 | 1.1.34-14.el9_7.1 | [ALSA-2026:6266](https://patchblox.com/security/data/fix/linux/alsa-2026-6266.md) | Mar 31, 2026 | | Linux | libxslt amzn 2023 | 1.1.42-3.amzn2023 | [ALAS2023-2025-905](https://patchblox.com/security/data/fix/linux/alas2023-2025-905.md) | Mar 13, 2025 | | Linux | libxslt ol 8 | 0:1.1.32-6.2.0.1.el8_10 | [ELSA-2025-8676](https://patchblox.com/security/data/fix/linux/elsa-2025-8676.md) | Jun 9, 2025 | | Linux | libxslt ol 9 | 0:1.1.34-14.0.1.el9_7.1 | [ELSA-2026-6266](https://patchblox.com/security/data/fix/linux/elsa-2026-6266.md) | Mar 31, 2026 | | Linux | libxslt opensuse-leap 15.6 | 1.1.34-150400.3.6.1 | [SUSE-SU-2025:1125-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-1125-1.md) | Apr 3, 2025 | | Linux | libxslt rocky 8 | 0:1.1.32-6.2.el8_10 | [RLSA-2025:8676](https://patchblox.com/security/data/fix/linux/rlsa-2025-8676.md) | Jul 29, 2025 | | Linux | libxslt rocky 9 | 0:1.1.34-14.el9_7.1 | [RLSA-2026:6266](https://patchblox.com/security/data/fix/linux/rlsa-2026-6266.md) | Apr 7, 2026 | | Linux | libxslt sles 15.6 | 1.1.34-150400.3.6.1 | [SUSE-SU-2025:1125-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-1125-1.md) | Apr 3, 2025 | | Linux | libxslt-debuginfo amzn 2023 | 1.1.42-3.amzn2023 | [ALAS2023-2025-905](https://patchblox.com/security/data/fix/linux/alas2023-2025-905.md) | Mar 13, 2025 | | Linux | libxslt-debugsource amzn 2023 | 1.1.42-3.amzn2023 | [ALAS2023-2025-905](https://patchblox.com/security/data/fix/linux/alas2023-2025-905.md) | Mar 13, 2025 | | Linux | libxslt-devel RHEL 8 | 0:1.1.32-6.2.el8_10 | [RHSA-2025:8676](https://patchblox.com/security/data/fix/linux/rhsa-2025-8676.md) | Jun 9, 2025 | | Linux | libxslt-devel RHEL 9 | 0:1.1.34-14.el9_7.1 | [RHSA-2026:6266](https://patchblox.com/security/data/fix/linux/rhsa-2026-6266.md) | Apr 15, 2026 | | Linux | libxslt-devel almalinux 8 | 1.1.32-6.2.el8_10 | [ALSA-2025:8676](https://patchblox.com/security/data/fix/linux/alsa-2025-8676.md) | Jun 9, 2025 | | Linux | libxslt-devel almalinux 9 | 1.1.34-14.el9_7.1 | [ALSA-2026:6266](https://patchblox.com/security/data/fix/linux/alsa-2026-6266.md) | Mar 31, 2026 | | Linux | libxslt-devel amzn 2023 | 1.1.42-3.amzn2023 | [ALAS2023-2025-905](https://patchblox.com/security/data/fix/linux/alas2023-2025-905.md) | Mar 13, 2025 | | Linux | libxslt-devel ol 8 | 0:1.1.32-6.2.0.1.el8_10 | [ELSA-2025-8676](https://patchblox.com/security/data/fix/linux/elsa-2025-8676.md) | Jun 9, 2025 | | Linux | libxslt-devel ol 9 | 0:1.1.34-14.0.1.el9_7.1 | [ELSA-2026-6266](https://patchblox.com/security/data/fix/linux/elsa-2026-6266.md) | Mar 31, 2026 | | Linux | libxslt-python opensuse-leap 15.6 | 1.1.32-150000.3.17.1 | [SUSE-SU-2025:1003-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-1003-1.md) | Mar 25, 2025 | | Linux | libxslt1.1 Ubuntu 18.04.6 LTS (bionic) | 1.1.29-5ubuntu0.3+esm1 | [libxslt1.1 1.1.29-5ubuntu0.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libxslt1.1-1.1.29-5ubuntu0.3-esm1.md) | Sep 27, 2023 | | Linux | libxslt1.1 Ubuntu 20.04 LTS (focal) | 1.1.34-4ubuntu0.20.04.3+esm1 | [libxslt1.1 1.1.34-4ubuntu0.20.04.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libxslt1.1-1.1.34-4ubuntu0.20.04.3-esm1.md) | Sep 27, 2023 | | Linux | libxslt1.1 Ubuntu 22.04.1 LTS (jammy) | 1.1.34-4ubuntu0.22.04.4 | [libxslt1.1 1.1.34-4ubuntu0.22.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libxslt1.1-1.1.34-4ubuntu0.22.04.4.md) | Sep 27, 2023 | | Linux | python-libxslt1 Ubuntu 18.04.6 LTS (bionic) | 1.1.29-5ubuntu0.3+esm1 | [python-libxslt1 1.1.29-5ubuntu0.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-libxslt1-1.1.29-5ubuntu0.3-esm1.md) | Sep 27, 2023 | | Linux | python3-libxslt amzn 2023 | 1.1.42-3.amzn2023 | [ALAS2023-2025-905](https://patchblox.com/security/data/fix/linux/alas2023-2025-905.md) | Mar 13, 2025 | | Linux | python3-libxslt-debuginfo amzn 2023 | 1.1.42-3.amzn2023 | [ALAS2023-2025-905](https://patchblox.com/security/data/fix/linux/alas2023-2025-905.md) | Mar 13, 2025 | | Linux | xsltproc Ubuntu 18.04.6 LTS (bionic) | 1.1.29-5ubuntu0.3+esm1 | [xsltproc 1.1.29-5ubuntu0.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xsltproc-1.1.29-5ubuntu0.3-esm1.md) | Sep 27, 2023 | | Linux | xsltproc Ubuntu 20.04 LTS (focal) | 1.1.34-4ubuntu0.20.04.3+esm1 | [xsltproc 1.1.34-4ubuntu0.20.04.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xsltproc-1.1.34-4ubuntu0.20.04.3-esm1.md) | Sep 27, 2023 | | Linux | xsltproc Ubuntu 22.04.1 LTS (jammy) | 1.1.34-4ubuntu0.22.04.4 | [xsltproc 1.1.34-4ubuntu0.22.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-xsltproc-1.1.34-4ubuntu0.22.04.4.md) | Sep 27, 2023 | --- Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.