CLSA-2026-1792507096
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1792507096.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1792507096
- Upstream
- Published
- 2026-10-20T16:51:41Z
- Modified
- 2026-10-26T09:31:41Z
- Summary
- libxslt: Fix of 6 CVEs
- Details
-
- CVE-2019-11068: fix security framework bypass in xsltCheckRead and xsltCheckWrite callers
- CVE-2019-18197: fix dangling pointer in xsltCopyText
- CVE-2019-5815: always set context node before calling XPath iterators
- CVE-2021-30560: fix use-after-free in xsltApplyTemplates
- CVE-2024-55549: fix use-after-free related to excluded namespaces
- CVE-2025-24855: fix use-after-free of XPath context node in nested XPath evaluations
- References
-
- https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1792507096.html
- https://nvd.nist.gov/vuln/detail/CVE-2019-11068
- https://nvd.nist.gov/vuln/detail/CVE-2019-18197
- https://nvd.nist.gov/vuln/detail/CVE-2019-5815
- https://nvd.nist.gov/vuln/detail/CVE-2021-30560
- https://nvd.nist.gov/vuln/detail/CVE-2024-55549
- https://nvd.nist.gov/vuln/detail/CVE-2025-24855
Affected packages
TuxCare:CentOS:6 / libxslt
Package
- Name
- libxslt
- Purl
- pkg:rpm/tuxcare/libxslt?distro=centos-6
TuxCare:CentOS:6 / libxslt-devel
Package
- Name
- libxslt-devel
- Purl
- pkg:rpm/tuxcare/libxslt-devel?distro=centos-6