RLSA-2026:28584

Synopsis

Moderate: libxslt security update

Description

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.

Security Fix(es):

* libxslt: use-after-free with key data stored cross-RVT (CVE-2025-10911)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 10 aarch64 Rocky Linux 10 ppc64le Rocky Linux 10 riscv64 Rocky Linux 10 s390x Rocky Linux 10 x86_64

Fixes

2397838

CVEs

CVE-2025-10911

Affected packages

Rocky Linux 10 s390x - AppStream

libxslt-0:1.1.39-8.el10_2.1.s390x.rpm libxslt-debugsource-0:1.1.39-8.el10_2.1.s390x.rpm libxslt-debuginfo-0:1.1.39-8.el10_2.1.s390x.rpm libxslt-0:1.1.39-8.el10_2.1.src.rpm libxslt-devel-0:1.1.39-8.el10_2.1.s390x.rpm

Rocky Linux 10 aarch64 - AppStream

libxslt-0:1.1.39-8.el10_2.1.aarch64.rpm libxslt-debugsource-0:1.1.39-8.el10_2.1.aarch64.rpm libxslt-debuginfo-0:1.1.39-8.el10_2.1.aarch64.rpm libxslt-0:1.1.39-8.el10_2.1.src.rpm libxslt-devel-0:1.1.39-8.el10_2.1.aarch64.rpm

Rocky Linux 10 x86_64 - AppStream

libxslt-debuginfo-0:1.1.39-8.el10_2.1.x86_64.rpm libxslt-0:1.1.39-8.el10_2.1.x86_64.rpm libxslt-debugsource-0:1.1.39-8.el10_2.1.x86_64.rpm libxslt-0:1.1.39-8.el10_2.1.src.rpm libxslt-devel-0:1.1.39-8.el10_2.1.x86_64.rpm

Rocky Linux 10 ppc64le - AppStream

libxslt-debugsource-0:1.1.39-8.el10_2.1.ppc64le.rpm libxslt-0:1.1.39-8.el10_2.1.src.rpm libxslt-debuginfo-0:1.1.39-8.el10_2.1.ppc64le.rpm libxslt-devel-0:1.1.39-8.el10_2.1.ppc64le.rpm libxslt-0:1.1.39-8.el10_2.1.ppc64le.rpm

Rocky Linux 10 riscv64 - AppStream

libxslt-0:1.1.39-8.el10_2.1.src.rpm