Most recent entries from all

ALSA-2025:3615 — Important: libxslt security update

Affected: AlmaLinux:8: libxslt, AlmaLinux:8: libxslt-devel

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.

Security Fix(es):

* libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855) * libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-03641

BELL-CVE-2024-55549

Affected: Alpaquita:23: libxslt, Alpaquita:stream: libxslt, BellSoft Hardened Containers:23: libxslt, BellSoft Hardened Containers:stream: libxslt

BIT-java-2024-55549

Affected: Bitnami: java

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.

certfr-2025-avi-0422 — De multiples vulnérabilités ont été découvertes dans IBM QRadar SIEM. Certaines d'entre elles permettent à un attaquant…

certfr-2025-avi-0422

Withdrawn: CLEANSTART-2026-CW84723 — Security fixes in ingress-nginx-controller-1.14 1.14.5-r3

Withdrawn by the publisher.

Affected: CleanStart: ingress-nginx-controller-1.14

Package ingress-nginx-controller-1.14 version 1.14.5-r3 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2024-55549, CVE-2025-24855

ESSA-2025:2931 — Important: libxslt security update

Important: libxslt security update

EUVD-2026-258204

fkie_cve-2024-55549

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.

GHSA-g8fv-r98j-937r

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.

msrc_CVE-2024-55549 — xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue

msrc_CVE-2024-55549

OESA-2025-1296 — libxslt security update

Affected: openEuler:22.03-LTS-SP4: libxslt, openEuler:24.03-LTS: libxslt, openEuler:24.03-LTS-SP1: libxslt, openEuler:20.03-LTS-SP4: libxslt, openEuler:22.03-LTS-SP3: libxslt

Libxslt is the XSLT C library developed for the GNOME project Security Fix(es):

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.(CVE-2024-55549)

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.(CVE-2025-24855)

RHSA-2025:3613 — Red Hat Security Advisory: libxslt security update

libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)

SUSE-SU-2025:1003-1 — Security update for libxslt

Security update for libxslt

UBUNTU-CVE-2024-55549

Affected: Ubuntu:Pro:14.04:LTS: libxslt, Ubuntu:Pro:16.04:LTS: libxslt, Ubuntu:Pro:18.04:LTS: libxslt, Ubuntu:20.04:LTS: libxslt, Ubuntu:22.04:LTS: libxslt, Ubuntu:24.04:LTS: libxslt

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.

WID-SEC-W-2025-0718 — Red Hat Enterprise Linux (libxslt): Schwachstelle ermöglicht DoS und Codeausführung

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in libxslt ausnutzen, um einen Denial of Service zu verursachen beliebigen Programmcode auszuführen.