[CLSA-2026:1788260731] Fix CVE(s): CVE-2024-55549
Type:
security
Severity:
Important
Release date:
2026-09-01 11:05:43 UTC
Description:
* SECURITY UPDATE: use-after-free of excluded namespace URIs - debian/patches/CVE-2024-55549.patch: intern excluded namespace URIs in the stylesheet dictionary instead of borrowing the namespace definition's href in libxslt/xslt.c. - CVE-2024-55549
CVEs fixed:
Updated packages:
  • libxslt1-dev_1.1.29-5ubuntu0.3+tuxcare.els1_amd64.deb
    sha:311c619995191d811f6fd4f29c846cf6a21ef1ea
  • libxslt1.1_1.1.29-5ubuntu0.3+tuxcare.els1_amd64.deb
    sha:b3f3be9130695b3606d17fc8ba507a34fb7725b9
  • python-libxslt1_1.1.29-5ubuntu0.3+tuxcare.els1_amd64.deb
    sha:4da1a9eb6974929b2fd3bc2aa38ebb970f0c2617
  • xsltproc_1.1.29-5ubuntu0.3+tuxcare.els1_amd64.deb
    sha:18772658406542d1b6bc0e3d5f38a40640e32ccb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.