Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:0603-1

Опубликовано: 24 фев. 2026
Источник: suse-cvrf

Описание

Security update for libxslt

This update for libxslt fixes the following issues:

  • CVE-2025-11731: fixed a type confusion in exsltFuncResultComp function leading to denial of service (bsc#1251979)
  • CVE-2025-10911: last fix caused a regression, patch was temporary disabled (bsc#1250553)

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
libxslt-devel-1.1.34-150400.3.13.1
libxslt-tools-1.1.34-150400.3.13.1
libxslt1-1.1.34-150400.3.13.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
libxslt-devel-1.1.34-150400.3.13.1
libxslt-tools-1.1.34-150400.3.13.1
libxslt1-1.1.34-150400.3.13.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
libxslt-devel-1.1.34-150400.3.13.1
libxslt-tools-1.1.34-150400.3.13.1
libxslt1-1.1.34-150400.3.13.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
libxslt-devel-1.1.34-150400.3.13.1
libxslt-tools-1.1.34-150400.3.13.1
libxslt1-1.1.34-150400.3.13.1
SUSE Linux Enterprise Server 15 SP4-LTSS
libxslt-devel-1.1.34-150400.3.13.1
libxslt-tools-1.1.34-150400.3.13.1
libxslt1-1.1.34-150400.3.13.1
SUSE Linux Enterprise Server 15 SP5-LTSS
libxslt-devel-1.1.34-150400.3.13.1
libxslt-tools-1.1.34-150400.3.13.1
libxslt1-1.1.34-150400.3.13.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
libxslt-devel-1.1.34-150400.3.13.1
libxslt-tools-1.1.34-150400.3.13.1
libxslt1-1.1.34-150400.3.13.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
libxslt-devel-1.1.34-150400.3.13.1
libxslt-tools-1.1.34-150400.3.13.1
libxslt1-1.1.34-150400.3.13.1

Ссылки

Описание

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libxslt-devel-1.1.34-150400.3.13.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libxslt-tools-1.1.34-150400.3.13.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libxslt1-1.1.34-150400.3.13.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libxslt-devel-1.1.34-150400.3.13.1
Ссылки

Описание

A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libxslt-devel-1.1.34-150400.3.13.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libxslt-tools-1.1.34-150400.3.13.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libxslt1-1.1.34-150400.3.13.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libxslt-devel-1.1.34-150400.3.13.1
Ссылки