Critical Security Update for libxslt: Addressing CVE-2025-10911
Summary
RHSA-2026:29807: Red Hat Security Advisory: libxslt security update. Affects libxslt versions < 0:1.1.34-13.el9_6.2. Fixed in 0:1.1.34-13.el9_6.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libxslt is a widely used library for transforming XML documents into various formats using XSLT (Extensible Stylesheet Language Transformations). It is integral for applications that require XML processing and is often utilized in web services and data interchange. The library provides essential features such as support for XPath and XSLT 1.0, making it a crucial component in many software stacks. However, vulnerabilities in libxslt can lead to significant security risks, including potential data exposure and application crashes.
Vulnerability Detail
The vulnerability identified as CVE-2025-10911 affects libxslt versions prior to 1.1.34-13.el9_6.2. This security flaw can be exploited by attackers to cause denial of service or potentially execute arbitrary code through crafted XML documents. The vulnerability arises from improper handling of certain XML inputs, which could lead to memory corruption and application instability. It is crucial for users of libxslt to address this vulnerability promptly to mitigate risks associated with data integrity and application security.
How To Fix
Minimum fixed version
0:1.1.34-13.el9_6.2
This is the first release that contains the fix.
sudo dnf update libxsltTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not feasible, consider implementing input validation to sanitize XML documents before processing them with libxslt. This can help mitigate the risk of exploitation until the library is updated.
Conclusion
The libxslt library is critical for XML processing in many applications, and the identified vulnerability CVE-2025-10911 poses significant risks. Users are strongly encouraged to update to the patched version 1.1.34-13.el9_6.2 to ensure their systems remain secure. Implementing input validation can serve as a temporary measure until the update is applied.
See every vulnerability recorded for libxslt →
FAQ
CVE-2025-10911 is a security vulnerability in the libxslt library that can lead to denial of service or arbitrary code execution when processing specially crafted XML documents.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Failing to address this vulnerability could result in application crashes, data loss, or unauthorized access to sensitive information.
Yes, implementing input validation to sanitize XML documents can help reduce the risk of exploitation until the library is updated.
More information about libxslt can be found on its official documentation page or through community resources that discuss XML processing and transformations.
Related vulnerabilities
Recent vulnerabilities recorded for libxslt.
