Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
A high-severity security advisory from Red Hat addresses vulnerabilities in the libxslt library used in Red Hat Enterprise Linux 10 and Red Hat Hardened Images. The update fixes bugs including a type confusion issue and a heap use-after-free vulnerability caused by attribute corruption. These issues affect multiple architectures including aarch64 and x86_64. The advisory provides updated RPM packages to remediate these vulnerabilities. No known exploits in the wild have been reported. The vendor has released official bug fix updates to address these issues.
AI Analysis
Technical Summary
The Red Hat security advisory RHBA-2025:12345 and RHSA-2026:11015 describe bug fixes and enhancements for libxslt in Red Hat Enterprise Linux 10 and Red Hat Hardened Images. The vulnerabilities include a type confusion in xmlNode.psvi between stylesheet and source nodes and a heap use-after-free triggered by corruption of xmlAttrPtr. These issues affect libxslt versions prior to the updated packages (libxslt-1.1.45-0.1.hum1). The advisory covers multiple Red Hat Enterprise Linux 10 variants and architectures (x86_64, aarch64, ppc64le, s390x). The vendor provides updated RPM packages to fix these vulnerabilities. No exploits in the wild have been reported.
Potential Impact
The vulnerabilities could allow an attacker to cause memory corruption through type confusion and use-after-free bugs in libxslt, potentially leading to application crashes or other unintended behavior. The severity is rated high by Red Hat, indicating significant security risk if exploited. However, there are no known active exploits reported at this time.
Mitigation Recommendations
Red Hat has released official bug fix updates for libxslt as part of Red Hat Enterprise Linux 10 and Red Hat Hardened Images. Users should apply the provided updates (libxslt-1.1.45-0.1.hum1 and related packages) to remediate these vulnerabilities. Detailed update instructions are available from Red Hat's official resources. No additional mitigation is required beyond applying these official patches.
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Description
A high-severity security advisory from Red Hat addresses vulnerabilities in the libxslt library used in Red Hat Enterprise Linux 10 and Red Hat Hardened Images. The update fixes bugs including a type confusion issue and a heap use-after-free vulnerability caused by attribute corruption. These issues affect multiple architectures including aarch64 and x86_64. The advisory provides updated RPM packages to remediate these vulnerabilities. No known exploits in the wild have been reported. The vendor has released official bug fix updates to address these issues.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Red Hat security advisory RHBA-2025:12345 and RHSA-2026:11015 describe bug fixes and enhancements for libxslt in Red Hat Enterprise Linux 10 and Red Hat Hardened Images. The vulnerabilities include a type confusion in xmlNode.psvi between stylesheet and source nodes and a heap use-after-free triggered by corruption of xmlAttrPtr. These issues affect libxslt versions prior to the updated packages (libxslt-1.1.45-0.1.hum1). The advisory covers multiple Red Hat Enterprise Linux 10 variants and architectures (x86_64, aarch64, ppc64le, s390x). The vendor provides updated RPM packages to fix these vulnerabilities. No exploits in the wild have been reported.
Potential Impact
The vulnerabilities could allow an attacker to cause memory corruption through type confusion and use-after-free bugs in libxslt, potentially leading to application crashes or other unintended behavior. The severity is rated high by Red Hat, indicating significant security risk if exploited. However, there are no known active exploits reported at this time.
Mitigation Recommendations
Red Hat has released official bug fix updates for libxslt as part of Red Hat Enterprise Linux 10 and Red Hat Hardened Images. Users should apply the provided updates (libxslt-1.1.45-0.1.hum1 and related packages) to remediate these vulnerabilities. Detailed update instructions are available from Red Hat's official resources. No additional mitigation is required beyond applying these official patches.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHBA-2025:12345
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-7425"]
- Cvss Version
- 3.1
Threat ID: 6a1f4e87e29bf47b50080a1b
Added to database: 06/02/2026, 21:43:35 UTC
Last enriched: 08/02/2026, 22:57:31 UTC
Last updated: 08/02/2026, 22:57:31 UTC
Views: 68
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.