Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-7425

Fixed in a distro release EPSS <1%CVSS 7.8

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.

Published 2025-07-10 · CVE record · OSV

Products: GNOME libxml2, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform 4.17, Red Hat OpenShift Container Platform 4.18, Red Hat OpenShift Container Platform 4.19, Red Hat Web Terminal 1.11 on RHEL 9, Red Hat Web Terminal 1.12 on RHEL 9, Red Hat RHOSS-1.36-RHEL-8, cert-manager operator for Red Hat OpenShift 1.16, Red Hat Compliance Operator 1, Red Hat OpenShift File Integrity Operator - FIO 1, Red Hat Discovery 2, Red Hat Hardened Images, Red Hat Insights proxy 1.5, Red Hat OpenShift distributed tracing 3.5.3, Red Hat Enterprise Linux 6, Siemens RUGGEDCOM ROX MX5000, Siemens RUGGEDCOM ROX MX5000RE, Siemens RUGGEDCOM ROX RX1400, Siemens RUGGEDCOM ROX RX1500, Siemens RUGGEDCOM ROX RX1501, Siemens RUGGEDCOM ROX RX1510, Siemens RUGGEDCOM ROX RX1511, Siemens RUGGEDCOM ROX RX1512, Siemens RUGGEDCOM ROX RX1524, Siemens RUGGEDCOM ROX RX1536, Siemens RUGGEDCOM ROX RX5000, Siemens SIMATIC CN 4100, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Distro releases

ReleasePackageFixed in
AlmaLinux 8libxml22.9.7-21.el8_10.2
AlmaLinux 8libxml2-devel2.9.7-21.el8_10.2
AlmaLinux 8python3-libxml22.9.7-21.el8_10.2
AlmaLinux 9libxml22.9.13-11.el9_6
AlmaLinux 9libxml2-devel2.9.13-11.el9_6
AlmaLinux 9python3-libxml22.9.13-11.el9_6
Amazon Linux 2libxml22.9.1-6.amzn2.5.20
Amazon Linux 2libxml2-devel2.9.1-6.amzn2.5.20
Amazon Linux 2libxml2-python2.9.1-6.amzn2.5.20
Amazon Linux 2libxml2-static2.9.1-6.amzn2.5.20
Amazon Linux 2023libxml22.10.4-1.amzn2023.0.13
Amazon Linux 2023libxml2-devel2.10.4-1.amzn2023.0.13
Amazon Linux 2023libxml2-static2.10.4-1.amzn2023.0.13
Amazon Linux 2023python3-libxml22.10.4-1.amzn2023.0.13
Chainguardlibxsltno fix
Chainguardlibxslt-devno fix
Chainguardlibxslt-docno fix
Chainguardlibxslt-staticno fix
Chainguardopenjdk-11-openj90.59.0-r2
Chainguardopenjdk-11-openj9-dbg0.59.0-r2
Chainguardopenjdk-11-openj9-default-jdk0.59.0-r2
Chainguardopenjdk-11-openj9-default-jvm0.59.0-r2
Chainguardopenjdk-11-openj9-doc0.59.0-r2
Chainguardopenjdk-11-openj9-jmods0.59.0-r2
Chainguardopenjdk-11-openj9-jre0.59.0-r2
Chainguardopenjdk-17-openj90.59.0-r1
Chainguardopenjdk-17-openj9-dbg0.59.0-r1
Chainguardopenjdk-17-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-17-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-17-openj9-doc0.59.0-r1
Chainguardopenjdk-17-openj9-jmods0.59.0-r1
Chainguardopenjdk-17-openj9-jre0.59.0-r1
Chainguardopenjdk-21-openj90.59.0-r1
Chainguardopenjdk-21-openj9-dbg0.59.0-r1
Chainguardopenjdk-21-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-21-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-21-openj9-doc0.59.0-r1
Chainguardopenjdk-21-openj9-jmods0.59.0-r1
Chainguardopenjdk-21-openj9-jre0.59.0-r1
Chainguardopenjdk-25-openj90.59.0-r1
Chainguardopenjdk-25-openj9-dbg0.59.0-r1
Chainguardopenjdk-25-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-25-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-25-openj9-jmods0.59.0-r1
Chainguardopenjdk-25-openj9-jre0.59.0-r1
Chainguardopenjdk-26-openj90.59.0-r1
Chainguardopenjdk-26-openj9-dbg0.59.0-r1
Chainguardopenjdk-26-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-26-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-26-openj9-jmods0.59.0-r1
Chainguardopenjdk-26-openj9-jre0.59.0-r1
Chainguardopenjdk-8-openj90.59.0-r1
Chainguardopenjdk-8-openj9-dbg0.59.0-r1
Chainguardopenjdk-8-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-8-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-8-openj9-doc0.59.0-r1
Chainguardopenjdk-8-openj9-jre0.59.0-r1
Debian 12libxml22.9.14+dfsg-1.3~deb12u4
Debian 13libxml22.12.7+dfsg+really2.9.14-2.1+deb13u1
Debian 14libxsltno fix
Red Hat Enterprise Linux 10.0libxslt0:1.1.39-8.el10_0
Red Hat Enterprise Linux 10.0libxslt-debuginfo0:1.1.39-8.el10_0
Red Hat Enterprise Linux 10.0libxslt-debugsource0:1.1.39-8.el10_0
Red Hat Enterprise Linux 10.0libxslt-devel0:1.1.39-8.el10_0
Red Hat Enterprise Linux 8libxml20:2.9.7-21.el8_10.2
Red Hat Enterprise Linux 8libxml2-debuginfo0:2.9.7-21.el8_10.2
Red Hat Enterprise Linux 8libxml2-debugsource0:2.9.7-21.el8_10.2
Red Hat Enterprise Linux 8libxml2-devel0:2.9.7-21.el8_10.2
Red Hat Enterprise Linux 8python3-libxml20:2.9.7-21.el8_10.2
Red Hat Enterprise Linux 8python3-libxml2-debuginfo0:2.9.7-21.el8_10.2
Red Hat Enterprise Linux 9libxml20:2.9.13-11.el9_6
Red Hat Enterprise Linux 9libxml2-debuginfo0:2.9.13-11.el9_6
Red Hat Enterprise Linux 9libxml2-debugsource0:2.9.13-11.el9_6
Red Hat Enterprise Linux 9libxml2-devel0:2.9.13-11.el9_6
Red Hat Enterprise Linux 9python3-libxml20:2.9.13-11.el9_6
Red Hat Enterprise Linux 9python3-libxml2-debuginfo0:2.9.13-11.el9_6
Red Hat hummingbird 1libxml20:2.15.3-0.1.hum1
Red Hat hummingbird 1libxml2-160:2.15.3-0.1.hum1
Red Hat hummingbird 1libxml2-devel0:2.15.3-0.1.hum1
Red Hat hummingbird 1libxml2-static0:2.15.3-0.1.hum1
Red Hat hummingbird 1python3-libxml20:2.15.3-0.1.hum1
Red Hat rhel aus 8.2libxml20:2.9.7-9.el8_2.4
Red Hat rhel aus 8.2libxml2-debuginfo0:2.9.7-9.el8_2.4
Red Hat rhel aus 8.2libxml2-debugsource0:2.9.7-9.el8_2.4
Red Hat rhel aus 8.2libxml2-devel0:2.9.7-9.el8_2.4
Red Hat rhel aus 8.2python3-libxml20:2.9.7-9.el8_2.4
Red Hat rhel aus 8.2python3-libxml2-debuginfo0:2.9.7-9.el8_2.4
Red Hat rhel aus 8.4libxml20:2.9.7-9.el8_4.7
Red Hat rhel aus 8.4libxml2-debuginfo0:2.9.7-9.el8_4.7
Red Hat rhel aus 8.4libxml2-debugsource0:2.9.7-9.el8_4.7
Red Hat rhel aus 8.4libxml2-devel0:2.9.7-9.el8_4.7
Red Hat rhel aus 8.4python3-libxml20:2.9.7-9.el8_4.7
Red Hat rhel aus 8.4python3-libxml2-debuginfo0:2.9.7-9.el8_4.7
Red Hat rhel aus 8.6libxml20:2.9.7-13.el8_6.11
Red Hat rhel aus 8.6libxml2-debuginfo0:2.9.7-13.el8_6.11
Red Hat rhel aus 8.6libxml2-debugsource0:2.9.7-13.el8_6.11
Red Hat rhel aus 8.6libxml2-devel0:2.9.7-13.el8_6.11
Red Hat rhel aus 8.6python3-libxml20:2.9.7-13.el8_6.11
Red Hat rhel aus 8.6python3-libxml2-debuginfo0:2.9.7-13.el8_6.11
Red Hat rhel e4s 8.6libxml20:2.9.7-13.el8_6.11
Red Hat rhel e4s 8.6libxml2-debuginfo0:2.9.7-13.el8_6.11
Red Hat rhel e4s 8.6libxml2-debugsource0:2.9.7-13.el8_6.11
Red Hat rhel e4s 8.6libxml2-devel0:2.9.7-13.el8_6.11
Red Hat rhel e4s 8.6python3-libxml20:2.9.7-13.el8_6.11
Red Hat rhel e4s 8.6python3-libxml2-debuginfo0:2.9.7-13.el8_6.11
Red Hat rhel e4s 8.8libxml20:2.9.7-16.el8_8.10
Red Hat rhel e4s 8.8libxml2-debuginfo0:2.9.7-16.el8_8.10
Red Hat rhel e4s 8.8libxml2-debugsource0:2.9.7-16.el8_8.10
Red Hat rhel e4s 8.8libxml2-devel0:2.9.7-16.el8_8.10
Red Hat rhel e4s 8.8python3-libxml20:2.9.7-16.el8_8.10
Red Hat rhel e4s 8.8python3-libxml2-debuginfo0:2.9.7-16.el8_8.10
Red Hat rhel e4s 9.0libxml20:2.9.13-1.el9_0.6
Red Hat rhel e4s 9.0libxml2-debuginfo0:2.9.13-1.el9_0.6
Red Hat rhel e4s 9.0libxml2-debugsource0:2.9.13-1.el9_0.6
Red Hat rhel e4s 9.0libxml2-devel0:2.9.13-1.el9_0.6
Red Hat rhel e4s 9.0python3-libxml20:2.9.13-1.el9_0.6
Red Hat rhel e4s 9.0python3-libxml2-debuginfo0:2.9.13-1.el9_0.6
Red Hat rhel e4s 9.2libxml20:2.9.13-3.el9_2.8
Red Hat rhel e4s 9.2libxml2-debuginfo0:2.9.13-3.el9_2.8
Red Hat rhel e4s 9.2libxml2-debugsource0:2.9.13-3.el9_2.8
Red Hat rhel e4s 9.2libxml2-devel0:2.9.13-3.el9_2.8
Red Hat rhel e4s 9.2python3-libxml20:2.9.13-3.el9_2.8
Red Hat rhel e4s 9.2python3-libxml2-debuginfo0:2.9.13-3.el9_2.8
Red Hat rhel els 7libxml20:2.9.1-6.el7_9.12
Red Hat rhel els 7libxml2-debuginfo0:2.9.1-6.el7_9.12
Red Hat rhel els 7libxml2-devel0:2.9.1-6.el7_9.12
Red Hat rhel els 7libxml2-python0:2.9.1-6.el7_9.12
Red Hat rhel els 7libxml2-static0:2.9.1-6.el7_9.12
Red Hat rhel eus 9.4libxml20:2.9.13-11.el9_4
Red Hat rhel eus 9.4libxml2-debuginfo0:2.9.13-11.el9_4
Red Hat rhel eus 9.4libxml2-debugsource0:2.9.13-11.el9_4
Red Hat rhel eus 9.4libxml2-devel0:2.9.13-11.el9_4
Red Hat rhel eus 9.4python3-libxml20:2.9.13-11.el9_4
Red Hat rhel eus 9.4python3-libxml2-debuginfo0:2.9.13-11.el9_4
Red Hat rhel eus long life 8.4libxml20:2.9.7-9.el8_4.7
Red Hat rhel eus long life 8.4libxml2-debuginfo0:2.9.7-9.el8_4.7
Red Hat rhel eus long life 8.4libxml2-debugsource0:2.9.7-9.el8_4.7
Red Hat rhel eus long life 8.4libxml2-devel0:2.9.7-9.el8_4.7
Red Hat rhel eus long life 8.4python3-libxml20:2.9.7-9.el8_4.7
Red Hat rhel eus long life 8.4python3-libxml2-debuginfo0:2.9.7-9.el8_4.7
Red Hat rhel tus 8.6libxml20:2.9.7-13.el8_6.11
Red Hat rhel tus 8.6libxml2-debuginfo0:2.9.7-13.el8_6.11
Red Hat rhel tus 8.6libxml2-debugsource0:2.9.7-13.el8_6.11
Red Hat rhel tus 8.6libxml2-devel0:2.9.7-13.el8_6.11
Red Hat rhel tus 8.6python3-libxml20:2.9.7-13.el8_6.11
Red Hat rhel tus 8.6python3-libxml2-debuginfo0:2.9.7-13.el8_6.11
Red Hat rhel tus 8.8libxml20:2.9.7-16.el8_8.10
Red Hat rhel tus 8.8libxml2-debuginfo0:2.9.7-16.el8_8.10
Red Hat rhel tus 8.8libxml2-debugsource0:2.9.7-16.el8_8.10
Red Hat rhel tus 8.8libxml2-devel0:2.9.7-16.el8_8.10
Red Hat rhel tus 8.8python3-libxml20:2.9.7-16.el8_8.10
Red Hat rhel tus 8.8python3-libxml2-debuginfo0:2.9.7-16.el8_8.10
Rocky Linux 9libxml20:2.9.13-11.el9_6
SUSE Enterprise Storage 7.1libxml22.9.7-150000.3.85.1
SUSE Enterprise Storage 7.1python-libxml2-python2.9.7-150000.3.85.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSlibxml22.9.7-150000.3.85.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSpython-libxml2-python2.9.7-150000.3.85.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSlibxml22.9.14-150400.5.47.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSlibxml2-python2.9.14-150400.5.47.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSlibxml22.9.14-150400.5.47.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSlibxml2-python2.9.14-150400.5.47.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSlibxml22.10.3-150500.5.32.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSlibxml2-python2.10.3-150500.5.32.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSlibxml22.10.3-150500.5.32.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSlibxml2-python2.10.3-150500.5.32.1
SUSE Linux Enterprise Micro 5.1libxml22.9.7-150000.3.85.1
SUSE Linux Enterprise Micro 5.2libxml22.9.7-150000.3.85.1
SUSE Linux Enterprise Micro 5.2python-libxml2-python2.9.7-150000.3.85.1
SUSE Linux Enterprise Micro 5.3libxml22.9.14-150400.5.47.1
SUSE Linux Enterprise Micro 5.3libxml2-python2.9.14-150400.5.47.1
SUSE Linux Enterprise Micro 5.4libxml22.9.14-150400.5.47.1
SUSE Linux Enterprise Micro 5.4libxml2-python2.9.14-150400.5.47.1
SUSE Linux Enterprise Micro 5.5libxml22.10.3-150500.5.32.1
SUSE Linux Enterprise Micro 5.5libxml2-python2.10.3-150500.5.32.1
SUSE Linux Enterprise Module for Basesystem 15 SP6libxml22.10.3-150500.5.32.1
SUSE Linux Enterprise Module for Basesystem 15 SP6libxml2-python2.10.3-150500.5.32.1
SUSE Linux Enterprise Module for Basesystem 15 SP7libxml22.12.10-150700.4.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP7libxml2-python2.12.10-150700.4.6.1
SUSE Linux Enterprise Module for Python 3 15 SP6libxml2-python2.10.3-150500.5.32.1
SUSE Linux Enterprise Module for Python 3 15 SP7libxml2-python2.12.10-150700.4.6.1
SUSE Linux Enterprise Server 12 SP5-LTSSlibxml22.9.4-46.90.1
SUSE Linux Enterprise Server 12 SP5-LTSSpython-libxml22.9.4-46.90.1
SUSE Linux Enterprise Server 15 SP3-LTSSlibxml22.9.7-150000.3.85.1
SUSE Linux Enterprise Server 15 SP3-LTSSpython-libxml2-python2.9.7-150000.3.85.1
SUSE Linux Enterprise Server 15 SP4-LTSSlibxml22.9.14-150400.5.47.1
SUSE Linux Enterprise Server 15 SP4-LTSSlibxml2-python2.9.14-150400.5.47.1
SUSE Linux Enterprise Server 15 SP5-LTSSlibxml22.10.3-150500.5.32.1
SUSE Linux Enterprise Server 15 SP5-LTSSlibxml2-python2.10.3-150500.5.32.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5libxml22.9.4-46.90.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5python-libxml22.9.4-46.90.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3libxml22.9.7-150000.3.85.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3python-libxml2-python2.9.7-150000.3.85.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4libxml22.9.14-150400.5.47.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4libxml2-python2.9.14-150400.5.47.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5libxml22.10.3-150500.5.32.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5libxml2-python2.10.3-150500.5.32.1
SUSE Linux Micro 6.0libxml22.11.6-10.1
SUSE Linux Micro 6.1libxml22.11.6-slfo.1.1_6.1
SUSE Manager Proxy LTS 4.3libxml22.9.14-150400.5.47.1
SUSE Manager Proxy LTS 4.3libxml2-python2.9.14-150400.5.47.1
SUSE Manager Server LTS 4.3libxml22.9.14-150400.5.47.1
SUSE Manager Server LTS 4.3libxml2-python2.9.14-150400.5.47.1
Ubuntu 22.04 LTSlibxml22.9.13+dfsg-1ubuntu0.10
Ubuntu 24.04 LTSlibxml22.9.14+dfsg-1.3ubuntu3.6
Ubuntu 24.04 LTSlibxsltno fix
Ubuntu 25.10libxsltno fix
Ubuntu 26.04 LTSlibxsltno fix
Ubuntu 26.10libxsltno fix
Ubuntu Pro 14.04 LTSlibxml22.9.1+dfsg1-3ubuntu4.13+esm10
Ubuntu Pro 16.04 LTSlibxml22.9.3+dfsg1-1ubuntu0.7+esm11
Ubuntu Pro 18.04 LTSlibxml22.9.4+dfsg1-6.1ubuntu1.9+esm6
Ubuntu Pro 20.04 LTSlibxml22.9.10+dfsg-5ubuntu0.20.04.10+esm3
Wolfilibxsltno fix
Wolfilibxslt-devno fix
Wolfilibxslt-docno fix
Wolfilibxslt-staticno fix
openSUSE Leap 15.6libxml22.10.3-150500.5.32.1
openSUSE Leap 15.6libxml2-python2.10.3-150500.5.32.1
openSUSE Leap 15.6python-libxml2-python2.9.7-150000.3.85.1
openSUSE Tumbleweedlibxml22.13.8-3.1