Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 2025-0110: libxslt Security Advisory Updates

mageia
Calendar Grey March 22, 2025
Dist Mageia Esm H88
Security Advisory for Mageia addresses critical use-after-free issues in libxslt with CVE-2024-55549 and CVE-2025-24855.
xsltGetInheritedNsList in libxslt has a use-after-free issue related to exclusion of result prefixes (CVE-2024-55549)

Summary

xsltGetInheritedNsList in libxslt has a use-after-free issue related to exclusion of result prefixes (CVE-2024-55549). numbers.c in libxslt has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal (CVE-2025-24855).

References

- https://bugs.mageia.org/show_bug.cgi?id=34113

-

- https://www.cve.org/CVERecord?id=CVE-2024-55549

- https://www.cve.org/CVERecord?id=CVE-2025-24855

Topics%20covered

Topics Covered

security advisory libxslt use-after-free Mageia CVE-2024-55549 CVE-2025-24855

Resolution

SRPMS

- 9/core/libxslt-1.1.38-1.1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 22 Mar 2025
URL: https://advisories.mageia.org/MGASA-2025-0110.html
Type: security
CVE: CVE-2024-55549, CVE-2025-24855

Topics%20covered

Topics Covered

security advisory libxslt use-after-free Mageia CVE-2024-55549 CVE-2025-24855

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here