Inappropriate coding practices In libxslt
Description
A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 14 | - | ||
 rpm rhel8 | 0:2.9.7-21.el8_10.2 | ||
rpm rhel8.4 | 0:2.9.7-9.el8_4.7 | ||
rpm rhel10 | 0:1.1.39-8.el10_0 | ||
rpm rhel7 | - | - | |
rpm rhel9 | 0:2.9.13-11.el9_6 | ||
rpm rhel9.4 | 0:2.9.13-11.el9_4 | ||
rpm rhel6 | - | - | |
rpm rhel10 | 0:2.12.5-8.el10_0 |
Aliases
1. 2. 3. 4. 5.