Red Hat Product Errata RHSA-2026:29809 - Security Advisory Issued: 2026-06-25 Updated: 2026-06-25 RHSA-2026:29809 - Security Advisory Overview Updated Packages Synopsis Moderate: libxslt security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libxslt is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. Security Fix(es): libxslt: use-after-free with key data stored cross-RVT (CVE-2025-10911) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2397838 - CVE-2025-10911 libxslt: use-after-free with key data stored cross-RVT CVEs CVE-2025-10911 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM libxslt-1.1.39-8.el10_0.1.src.rpm SHA-256: a5b90336532b7b468971934cb5040dc944219999a6a79133e678f44b1d5e7088 x86_64 libxslt-1.1.39-8.el10_0.1.x86_64.rpm SHA-256: 7ae5c23a2b07e3a74c9ecfff8914ff22cde1dee6f3e7721a307c51b655819dc0 libxslt-debuginfo-1.1.39-8.el10_0.1.x86_64.rpm SHA-256: f9ae752ef654433ee53cceb225af52db7a65850006365da74a15bc260a8b9961 libxslt-debugsource-1.1.39-8.el10_0.1.x86_64.rpm SHA-256: 9923b11ed5a5129a4d5fbfc37616f0a54de12e34847cefce286bd49fb57f696e libxslt-devel-1.1.39-8.el10_0.1.x86_64.rpm SHA-256: cfd237a394ec168623ad8da38958cba4d5fecb8676b6f450dc3880233e371dbc Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM libxslt-1.1.39-8.el10_0.1.src.rpm SHA-256: a5b90336532b7b468971934cb5040dc944219999a6a79133e678f44b1d5e7088 s390x libxslt-1.1.39-8.el10_0.1.s390x.rpm SHA-256: 9c0aeef3712cc9eeca3572c8d83bd08986c232830c0a6e03d946dc3d0ab6121b libxslt-debuginfo-1.1.39-8.el10_0.1.s390x.rpm SHA-256: 68de7fd9a70d0cd7b7468c9ac54452362abbc6a09df4f4e1ce251fb207af7e81 libxslt-debugsource-1.1.39-8.el10_0.1.s390x.rpm SHA-256: 01da0951612d195ef5131cb38bd2746d2d24581dd12197d4b4c6e451acf9076e libxslt-devel-1.1.39-8.el10_0.1.s390x.rpm SHA-256: ff6d79d6ff1cf4e376a22a8838fc2b0014580c4ce71816ee311e9739815cc28f Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM libxslt-1.1.39-8.el10_0.1.src.rpm SHA-256: a5b90336532b7b468971934cb5040dc944219999a6a79133e678f44b1d5e7088 ppc64le libxslt-1.1.39-8.el10_0.1.ppc64le.rpm SHA-256: ad72b3d905f4ec0d3ab04773f11d62265883af5fc52d9ce51d9fcbd3d4a5a463 libxslt-debuginfo-1.1.39-8.el10_0.1.ppc64le.rpm SHA-256: 0c726f9793616e0d8a0e87fb56a9f27515633b8a69996d4386af5817a631d2d8 libxslt-debugsource-1.1.39-8.el10_0.1.ppc64le.rpm SHA-256: 462b5de970f9c4e4c624295c024620ce6d39c14f76586f14afd774addb2c14da libxslt-devel-1.1.39-8.el10_0.1.ppc64le.rpm SHA-256: a47e6a0ef128bf663319dfa1c955d0dc9c37ce2feee885dc5fa47e15cb943288 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM libxslt-1.1.39-8.el10_0.1.src.rpm SHA-256: a5b90336532b7b468971934cb5040dc944219999a6a79133e678f44b1d5e7088 aarch64 libxslt-1.1.39-8.el10_0.1.aarch64.rpm SHA-256: c84f6b49cd3b465093f2f753d947a46b5fb4542e64276e70a9a1f31b3da0ad6f libxslt-debuginfo-1.1.39-8.el10_0.1.aarch64.rpm SHA-256: 4b6abbeec74ecd27d1f65ca6b7d0b60dee7aa296529952c6e4930fd09c0663ca libxslt-debugsource-1.1.39-8.el10_0.1.aarch64.rpm SHA-256: d691201fe59da81bcb3ed9f9b8f5b4257a9d4725bd235b6070849b4f66284e50 libxslt-devel-1.1.39-8.el10_0.1.aarch64.rpm SHA-256: e522d93dc15a8c47c28362227532327e09608b7683099af8648a2b846683aedb Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 SRPM libxslt-1.1.39-8.el10_0.1.src.rpm SHA-256: a5b90336532b7b468971934cb5040dc944219999a6a79133e678f44b1d5e7088 aarch64 libxslt-1.1.39-8.el10_0.1.aarch64.rpm SHA-256: c84f6b49cd3b465093f2f753d947a46b5fb4542e64276e70a9a1f31b3da0ad6f libxslt-debuginfo-1.1.39-8.el10_0.1.aarch64.rpm SHA-256: 4b6abbeec74ecd27d1f65ca6b7d0b60dee7aa296529952c6e4930fd09c0663ca libxslt-debugsource-1.1.39-8.el10_0.1.aarch64.rpm SHA-256: d691201fe59da81bcb3ed9f9b8f5b4257a9d4725bd235b6070849b4f66284e50 libxslt-devel-1.1.39-8.el10_0.1.aarch64.rpm SHA-256: e522d93dc15a8c47c28362227532327e09608b7683099af8648a2b846683aedb Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 SRPM libxslt-1.1.39-8.el10_0.1.src.rpm SHA-256: a5b90336532b7b468971934cb5040dc944219999a6a79133e678f44b1d5e7088 s390x libxslt-1.1.39-8.el10_0.1.s390x.rpm SHA-256: 9c0aeef3712cc9eeca3572c8d83bd08986c232830c0a6e03d946dc3d0ab6121b libxslt-debuginfo-1.1.39-8.el10_0.1.s390x.rpm SHA-256: 68de7fd9a70d0cd7b7468c9ac54452362abbc6a09df4f4e1ce251fb207af7e81 libxslt-debugsource-1.1.39-8.el10_0.1.s390x.rpm SHA-256: 01da0951612d195ef5131cb38bd2746d2d24581dd12197d4b4c6e451acf9076e libxslt-devel-1.1.39-8.el10_0.1.s390x.rpm SHA-256: ff6d79d6ff1cf4e376a22a8838fc2b0014580c4ce71816ee311e9739815cc28f Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 SRPM libxslt-1.1.39-8.el10_0.1.src.rpm SHA-256: a5b90336532b7b468971934cb5040dc944219999a6a79133e678f44b1d5e7088 ppc64le libxslt-1.1.39-8.el10_0.1.ppc64le.rpm SHA-256: ad72b3d905f4ec0d3ab04773f11d62265883af5fc52d9ce51d9fcbd3d4a5a463 libxslt-debuginfo-1.1.39-8.el10_0.1.ppc64le.rpm SHA-256: 0c726f9793616e0d8a0e87fb56a9f27515633b8a69996d4386af5817a631d2d8 libxslt-debugsource-1.1.39-8.el10_0.1.ppc64le.rpm SHA-256: 462b5de970f9c4e4c624295c024620ce6d39c14f76586f14afd774addb2c14da libxslt-devel-1.1.39-8.el10_0.1.ppc64le.rpm SHA-256: a47e6a0ef128bf663319dfa1c955d0dc9c37ce2feee885dc5fa47e15cb943288 Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 SRPM libxslt-1.1.39-8.el10_0.1.src.rpm SHA-256: a5b90336532b7b468971934cb5040dc944219999a6a79133e678f44b1d5e7088 x86_64 libxslt-1.1.39-8.el10_0.1.x86_64.rpm SHA-256: 7ae5c23a2b07e3a74c9ecfff8914ff22cde1dee6f3e7721a307c51b655819dc0 libxslt-debuginfo-1.1.39-8.el10_0.1.x86_64.rpm SHA-256: f9ae752ef654433ee53cceb225af52db7a65850006365da74a15bc260a8b9961 libxslt-debugsource-1.1.39-8.el10_0.1.x86_64.rpm SHA-256: 9923b11ed5a5129a4d5fbfc37616f0a54de12e34847cefce286bd49fb57f696e libxslt-devel-1.1.39-8.el10_0.1.x86_64.rpm SHA-256: cfd237a394ec168623ad8da38958cba4d5fecb8676b6f450dc3880233e371dbc The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .