Home / mailings [USN-7787-1] Libxslt vulnerabilities
Posted on 02 October 2025
Ubuntu Security==========================================================================Ubuntu Security Notice USN-7787-1
September 30, 2025
libxslt vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in Libxslt.
Software Description:
- libxslt: XSLT processing library
Details:
Ivan Fratric discovered that Libxslt did not correctly handle certain
memory operations. An attacker could possibly use this issue to execute
arbitrary code or cause a denial of service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 18.04 LTS
libxslt1.1 1.1.29-5ubuntu0.3+esm2
Available with Ubuntu Pro
xsltproc 1.1.29-5ubuntu0.3+esm2
Available with Ubuntu Pro
Ubuntu 16.04 LTS
libxslt1.1 1.1.28-2.1ubuntu0.3+esm3
Available with Ubuntu Pro
xsltproc 1.1.28-2.1ubuntu0.3+esm3
Available with Ubuntu Pro
Ubuntu 14.04 LTS
libxslt1.1 1.1.28-2ubuntu0.2+esm4
Available with Ubuntu Pro
xsltproc 1.1.28-2ubuntu0.2+esm4
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-7787-1
CVE-2024-55549, CVE-2025-24855
--===============1202412819598068164==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
