[CLSA-2026:1788275913] Fix CVE(s): CVE-2025-24855
Type:
security
Severity:
Important
Release date:
2026-09-01 15:18:43 UTC
Description:
* SECURITY UPDATE: use-after-free of the XPath context node - debian/patches/CVE-2025-24855.patch: restore the XPath context node after modifying it in libxslt/numbers.c, libxslt/templates.c and libxslt/xsltutils.c. - CVE-2025-24855
CVEs fixed:
Updated packages:
  • libxslt1-dev_1.1.29-5ubuntu0.3+tuxcare.els2_amd64.deb
    sha:ffbbd595ad096486f14e0bb3f4d0e8d6994ae5c4
  • libxslt1.1_1.1.29-5ubuntu0.3+tuxcare.els2_amd64.deb
    sha:fcc71b7251d672599c6fd57e3a01a71ecaa0e93c
  • python-libxslt1_1.1.29-5ubuntu0.3+tuxcare.els2_amd64.deb
    sha:77c58dbedb0dec7c81fc2cb5c1ee6a9d899d1cb0
  • xsltproc_1.1.29-5ubuntu0.3+tuxcare.els2_amd64.deb
    sha:c068cda6ab2f66121ce718dac9ed03b4186b004b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.