numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.1.34-4ubuntu0.20.04.3", "binary_name": "libxslt1-dev" }, { "binary_version": "1.1.34-4ubuntu0.20.04.3", "binary_name": "libxslt1.1" }, { "binary_version": "1.1.34-4ubuntu0.20.04.3", "binary_name": "libxslt1.1-dbgsym" }, { "binary_version": "1.1.34-4ubuntu0.20.04.3", "binary_name": "xsltproc" }, { "binary_version": "1.1.34-4ubuntu0.20.04.3", "binary_name": "xsltproc-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.1.34-4ubuntu0.22.04.3", "binary_name": "libxslt1-dev" }, { "binary_version": "1.1.34-4ubuntu0.22.04.3", "binary_name": "libxslt1.1" }, { "binary_version": "1.1.34-4ubuntu0.22.04.3", "binary_name": "libxslt1.1-dbgsym" }, { "binary_version": "1.1.34-4ubuntu0.22.04.3", "binary_name": "xsltproc" }, { "binary_version": "1.1.34-4ubuntu0.22.04.3", "binary_name": "xsltproc-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.1.39-0exp1ubuntu1.2", "binary_name": "libxslt1-dev" }, { "binary_version": "1.1.39-0exp1ubuntu1.2", "binary_name": "libxslt1.1" }, { "binary_version": "1.1.39-0exp1ubuntu1.2", "binary_name": "libxslt1.1-dbgsym" }, { "binary_version": "1.1.39-0exp1ubuntu1.2", "binary_name": "xsltproc" }, { "binary_version": "1.1.39-0exp1ubuntu1.2", "binary_name": "xsltproc-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.1.39-0exp1ubuntu0.24.04.2", "binary_name": "libxslt1-dev" }, { "binary_version": "1.1.39-0exp1ubuntu0.24.04.2", "binary_name": "libxslt1.1" }, { "binary_version": "1.1.39-0exp1ubuntu0.24.04.2", "binary_name": "libxslt1.1-dbgsym" }, { "binary_version": "1.1.39-0exp1ubuntu0.24.04.2", "binary_name": "xsltproc" }, { "binary_version": "1.1.39-0exp1ubuntu0.24.04.2", "binary_name": "xsltproc-dbgsym" } ] }