Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
libxslt before 1.1.43 can cause crashes
published 1 year ago
Summary
The libxslt library that many web and data-processing tools use can mishandle certain XML operations, leading it to use memory that's already been cleared. This can cause the program to stop working or allow an attacker to run unwanted code. Upgrade libxslt to version 1.1.43 or later (or apply the vendor's patch) to eliminate the risk.
What to do
- Update bellsoft openjdk21-lite to version 21.0.8_p12-r0.
- Update bellsoft openjdk24 to version 24.0.2_p12-r0.
- Update bellsoft libxslt to version 1.1.37-r2.
- Update bellsoft openjdk11 to version 11.0.28_p12-r0.
- Update bellsoft openjdk11-container-jre to version 11.0.28_p12-r0.
- Update bellsoft openjdk11-lite to version 11.0.28_p12-r0.
- Update bellsoft openjdk11-perf to version 11.0.28_p13-r0.
- Update bellsoft openjdk17 to version 17.0.16_p12-r0.
- Update bellsoft openjdk17-container-jre to version 17.0.16_p12-r0.
- Update bellsoft openjdk17-crac to version 17.0.16_p13-r0.
- Update bellsoft openjdk17-lite to version 17.0.16_p12-r0.
- Update bellsoft openjdk21 to version 21.0.8_p12-r0.
- Update bellsoft openjdk21-container-jre to version 21.0.8_p12-r0.
- Update bellsoft openjdk21-crac to version 21.0.8_p13-r0.
- Update bellsoft openjdk24-container-jre to version 24.0.2_p12-r0.
- Update bellsoft openjdk24-lite to version 24.0.2_p12-r0.
- Update bellsoft openjdk8 to version 8.462_p11-r0.
- Update bellsoft openjdk8-perf to version 8.462_p12-r0.
- Update bellsoft libxslt to version 1.1.43-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Alpaquita:stream | bellsoft | openjdk21-lite |
>= 21_p37-r0, < 21.0.8_p12-r0 Fix: upgrade to 21.0.8_p12-r0
|
| Alpaquita:stream | bellsoft | openjdk24 |
>= 24_p37-r0, < 24.0.2_p12-r0 Fix: upgrade to 24.0.2_p12-r0
|
| Alpaquita:23 | bellsoft | libxslt |
>= 1.1.37-r0, < 1.1.37-r2 Fix: upgrade to 1.1.37-r2
|
| Alpaquita:23 | bellsoft | openjdk11 |
>= 11.0.19_p7-r0, < 11.0.28_p12-r0 Fix: upgrade to 11.0.28_p12-r0
|
| Alpaquita:23 | bellsoft | openjdk11-container-jre |
>= 11.0.19_p7-r0, < 11.0.28_p12-r0 Fix: upgrade to 11.0.28_p12-r0
|
| Alpaquita:23 | bellsoft | openjdk11-lite |
>= 11.0.19_p7-r1, < 11.0.28_p12-r0 Fix: upgrade to 11.0.28_p12-r0
|
| Alpaquita:23 | bellsoft | openjdk11-perf |
>= 11.0.20.1_p1-r0, < 11.0.28_p13-r0 Fix: upgrade to 11.0.28_p13-r0
|
| Alpaquita:23 | bellsoft | openjdk17 |
>= 17.0.7_p7-r1, < 17.0.16_p12-r0 Fix: upgrade to 17.0.16_p12-r0
|
| Alpaquita:23 | bellsoft | openjdk17-container-jre |
>= 17.0.7_p7-r0, < 17.0.16_p12-r0 Fix: upgrade to 17.0.16_p12-r0
|
| Alpaquita:23 | bellsoft | openjdk17-crac |
>= 17.0.13_p13-r0, < 17.0.16_p13-r0 Fix: upgrade to 17.0.16_p13-r0
|
| Alpaquita:23 | bellsoft | openjdk17-lite |
>= 17.0.7_p7-r1, < 17.0.16_p12-r0 Fix: upgrade to 17.0.16_p12-r0
|
| Alpaquita:23 | bellsoft | openjdk21 |
>= 21_p37-r0, < 21.0.8_p12-r0 Fix: upgrade to 21.0.8_p12-r0
|
| Alpaquita:23 | bellsoft | openjdk21-container-jre |
>= 21_p37-r0, < 21.0.8_p12-r0 Fix: upgrade to 21.0.8_p12-r0
|
| Alpaquita:23 | bellsoft | openjdk21-crac |
>= 21.0.5_p12-r0, < 21.0.8_p13-r0 Fix: upgrade to 21.0.8_p13-r0
|
| Alpaquita:23 | bellsoft | openjdk21-lite |
>= 21_p37-r0, < 21.0.8_p12-r0 Fix: upgrade to 21.0.8_p12-r0
|
| Alpaquita:23 | bellsoft | openjdk24 |
>= 24_p37-r0, < 24.0.2_p12-r0 Fix: upgrade to 24.0.2_p12-r0
|
| Alpaquita:23 | bellsoft | openjdk24-container-jre |
>= 24_p37-r0, < 24.0.2_p12-r0 Fix: upgrade to 24.0.2_p12-r0
|
| Alpaquita:23 | bellsoft | openjdk24-lite |
>= 24_p37-r0, < 24.0.2_p12-r0 Fix: upgrade to 24.0.2_p12-r0
|
| Alpaquita:23 | bellsoft | openjdk8 |
>= 8u372_p7-r0, < 8.462_p11-r0 Fix: upgrade to 8.462_p11-r0
|
| Alpaquita:23 | bellsoft | openjdk8-perf |
>= 8u392_p9-r1, < 8.462_p12-r0 Fix: upgrade to 8.462_p12-r0
|
| Alpaquita:25 | bellsoft | openjdk11 |
>= 11.0.27_p9-r0, < 11.0.28_p12-r0 Fix: upgrade to 11.0.28_p12-r0
|
| Alpaquita:25 | bellsoft | openjdk11-container-jre |
>= 11.0.27_p9-r0, < 11.0.28_p12-r0 Fix: upgrade to 11.0.28_p12-r0
|
| Alpaquita:25 | bellsoft | openjdk11-lite |
>= 11.0.27_p9-r0, < 11.0.28_p12-r0 Fix: upgrade to 11.0.28_p12-r0
|
| Alpaquita:25 | bellsoft | openjdk17 |
>= 17.0.15_p10-r1, < 17.0.16_p12-r0 Fix: upgrade to 17.0.16_p12-r0
|
| Alpaquita:25 | bellsoft | openjdk17-container-jre |
>= 17.0.15_p10-r0, < 17.0.16_p12-r0 Fix: upgrade to 17.0.16_p12-r0
|
| Alpaquita:25 | bellsoft | openjdk17-crac |
>= 17.0.15_p13-r1, < 17.0.16_p13-r0 Fix: upgrade to 17.0.16_p13-r0
|
| Alpaquita:25 | bellsoft | openjdk17-lite |
>= 17.0.15_p10-r0, < 17.0.16_p12-r0 Fix: upgrade to 17.0.16_p12-r0
|
| Alpaquita:25 | bellsoft | openjdk21 |
>= 21.0.7_p9-r1, < 21.0.8_p12-r0 Fix: upgrade to 21.0.8_p12-r0
|
| Alpaquita:25 | bellsoft | openjdk21-container-jre |
>= 21.0.7_p9-r0, < 21.0.8_p12-r0 Fix: upgrade to 21.0.8_p12-r0
|
| Alpaquita:25 | bellsoft | openjdk21-crac |
>= 21.0.7_p12-r1, < 21.0.8_p13-r0 Fix: upgrade to 21.0.8_p13-r0
|
| Alpaquita:25 | bellsoft | openjdk21-lite |
>= 21.0.7_p9-r0, < 21.0.8_p12-r0 Fix: upgrade to 21.0.8_p12-r0
|
| Alpaquita:25 | bellsoft | openjdk24 |
>= 24.0.1_p11-r0, < 24.0.2_p12-r0 Fix: upgrade to 24.0.2_p12-r0
|
| Alpaquita:25 | bellsoft | openjdk24-container-jre |
>= 24.0.1_p11-r0, < 24.0.2_p12-r0 Fix: upgrade to 24.0.2_p12-r0
|
| Alpaquita:25 | bellsoft | openjdk24-lite |
>= 24.0.1_p11-r0, < 24.0.2_p12-r0 Fix: upgrade to 24.0.2_p12-r0
|
| Alpaquita:25 | bellsoft | openjdk8 |
>= 8.452_p11-r0, < 8.462_p11-r0 Fix: upgrade to 8.462_p11-r0
|
| Alpaquita:stream | bellsoft | libxslt |
>= 1.1.37-r0, < 1.1.43-r0 Fix: upgrade to 1.1.43-r0
|
| Alpaquita:stream | bellsoft | openjdk11 |
>= 11.0.19_p7-r0, < 11.0.28_p12-r0 Fix: upgrade to 11.0.28_p12-r0
|
| Alpaquita:stream | bellsoft | openjdk11-container-jre |
>= 11.0.19_p7-r0, < 11.0.28_p12-r0 Fix: upgrade to 11.0.28_p12-r0
|
| Alpaquita:stream | bellsoft | openjdk11-lite |
>= 11.0.19_p7-r1, < 11.0.28_p12-r0 Fix: upgrade to 11.0.28_p12-r0
|
| Alpaquita:stream | bellsoft | openjdk17 |
>= 17.0.7_p7-r1, < 17.0.16_p12-r0 Fix: upgrade to 17.0.16_p12-r0
|
| Alpaquita:stream | bellsoft | openjdk17-container-jre |
>= 17.0.7_p7-r0, < 17.0.16_p12-r0 Fix: upgrade to 17.0.16_p12-r0
|
| Alpaquita:stream | bellsoft | openjdk17-crac |
>= 17.0.10_p13-r0, < 17.0.16_p13-r0 Fix: upgrade to 17.0.16_p13-r0
|
| Alpaquita:stream | bellsoft | openjdk17-lite |
>= 17.0.7_p7-r1, < 17.0.16_p12-r0 Fix: upgrade to 17.0.16_p12-r0
|
| Alpaquita:stream | bellsoft | openjdk21 |
>= 21_p37-r0, < 21.0.8_p12-r0 Fix: upgrade to 21.0.8_p12-r0
|
| Alpaquita:stream | bellsoft | openjdk21-container-jre |
>= 21_p37-r0, < 21.0.8_p12-r0 Fix: upgrade to 21.0.8_p12-r0
|
| Alpaquita:stream | bellsoft | openjdk21-crac |
>= 21.0.2_p15-r0, < 21.0.8_p13-r0 Fix: upgrade to 21.0.8_p13-r0
|
| Alpaquita:stream | bellsoft | openjdk24-container-jre |
>= 24_p37-r0, < 24.0.2_p12-r0 Fix: upgrade to 24.0.2_p12-r0
|
| Alpaquita:stream | bellsoft | openjdk24-lite |
>= 24_p37-r0, < 24.0.2_p12-r0 Fix: upgrade to 24.0.2_p12-r0
|
| Alpaquita:stream | bellsoft | openjdk8 |
>= 8u372_p7-r1, < 8.462_p11-r0 Fix: upgrade to 8.462_p11-r0
|
| BellSoft Hardened Containers:25 | bellsoft | openjdk11-container-jre |
>= 11.0.27_p9-r0, < 11.0.28_p12-r0 Fix: upgrade to 11.0.28_p12-r0
|
Showing 50 of 84. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| BellSoft Hardened Containers:25 | bellsoft | openjdk11-lite |
>= 11.0.27_p9-r0, < 11.0.28_p12-r0 Fix: upgrade to 11.0.28_p12-r0
|
| BellSoft Hardened Containers:25 | bellsoft | openjdk17-container-jre |
>= 17.0.15_p10-r0, < 17.0.16_p12-r0 Fix: upgrade to 17.0.16_p12-r0
|
| BellSoft Hardened Containers:25 | bellsoft | openjdk17-crac |
>= 17.0.15_p13-r1, < 17.0.16_p13-r0 Fix: upgrade to 17.0.16_p13-r0
|
| BellSoft Hardened Containers:25 | bellsoft | openjdk17-lite |
>= 17.0.15_p10-r0, < 17.0.16_p12-r0 Fix: upgrade to 17.0.16_p12-r0
|
| BellSoft Hardened Containers:25 | bellsoft | openjdk21-container-jre |
>= 21.0.7_p9-r0, < 21.0.8_p12-r0 Fix: upgrade to 21.0.8_p12-r0
|
| BellSoft Hardened Containers:25 | bellsoft | openjdk21-crac |
>= 21.0.7_p12-r1, < 21.0.8_p13-r0 Fix: upgrade to 21.0.8_p13-r0
|
| BellSoft Hardened Containers:25 | bellsoft | openjdk21-lite |
>= 21.0.7_p9-r0, < 21.0.8_p12-r0 Fix: upgrade to 21.0.8_p12-r0
|
| BellSoft Hardened Containers:25 | bellsoft | openjdk24-container-jre |
>= 24.0.1_p11-r0, < 24.0.2_p12-r0 Fix: upgrade to 24.0.2_p12-r0
|
| BellSoft Hardened Containers:25 | bellsoft | openjdk24-lite |
>= 24.0.1_p11-r0, < 24.0.2_p12-r0 Fix: upgrade to 24.0.2_p12-r0
|
| BellSoft Hardened Containers:25 | bellsoft | openjdk8 |
>= 8.452_p11-r0, < 8.462_p11-r0 Fix: upgrade to 8.462_p11-r0
|
| BellSoft Hardened Containers:stream | bellsoft | openjdk11-container-jre |
>= 11.0.19_p7-r0, < 11.0.28_p12-r0 Fix: upgrade to 11.0.28_p12-r0
|
| BellSoft Hardened Containers:stream | bellsoft | openjdk11-lite |
>= 11.0.19_p7-r1, < 11.0.28_p12-r0 Fix: upgrade to 11.0.28_p12-r0
|
| BellSoft Hardened Containers:stream | bellsoft | openjdk17-container-jre |
>= 17.0.7_p7-r0, < 17.0.16_p12-r0 Fix: upgrade to 17.0.16_p12-r0
|
| BellSoft Hardened Containers:stream | bellsoft | openjdk17-crac |
>= 17.0.10_p13-r0, < 17.0.16_p13-r0 Fix: upgrade to 17.0.16_p13-r0
|
| BellSoft Hardened Containers:stream | bellsoft | openjdk17-lite |
>= 17.0.7_p7-r1, < 17.0.16_p12-r0 Fix: upgrade to 17.0.16_p12-r0
|
| BellSoft Hardened Containers:stream | bellsoft | openjdk21-container-jre |
>= 21_p37-r0, < 21.0.8_p12-r0 Fix: upgrade to 21.0.8_p12-r0
|
| BellSoft Hardened Containers:stream | bellsoft | openjdk21-crac |
>= 21.0.2_p15-r0, < 21.0.8_p13-r0 Fix: upgrade to 21.0.8_p13-r0
|
| BellSoft Hardened Containers:stream | bellsoft | openjdk21-lite |
>= 21_p37-r0, < 21.0.8_p12-r0 Fix: upgrade to 21.0.8_p12-r0
|
| BellSoft Hardened Containers:stream | bellsoft | openjdk24-container-jre |
>= 24_p37-r0, < 24.0.2_p12-r0 Fix: upgrade to 24.0.2_p12-r0
|
| BellSoft Hardened Containers:stream | bellsoft | openjdk24-lite |
>= 24_p37-r0, < 24.0.2_p12-r0 Fix: upgrade to 24.0.2_p12-r0
|
| BellSoft Hardened Containers:stream | bellsoft | openjdk8 |
>= 8u372_p7-r1, < 8.462_p11-r0 Fix: upgrade to 8.462_p11-r0
|
| BellSoft Hardened Containers:23 | bellsoft | openjdk11-container-jre |
>= 11.0.19_p7-r0, < 11.0.28_p12-r0 Fix: upgrade to 11.0.28_p12-r0
|
| BellSoft Hardened Containers:23 | bellsoft | openjdk11-lite |
>= 11.0.19_p7-r1, < 11.0.28_p12-r0 Fix: upgrade to 11.0.28_p12-r0
|
| BellSoft Hardened Containers:23 | bellsoft | openjdk11-perf |
>= 11.0.20.1_p1-r0, < 11.0.28_p13-r0 Fix: upgrade to 11.0.28_p13-r0
|
| BellSoft Hardened Containers:23 | bellsoft | openjdk17-container-jre |
>= 17.0.7_p7-r0, < 17.0.16_p12-r0 Fix: upgrade to 17.0.16_p12-r0
|
| BellSoft Hardened Containers:23 | bellsoft | openjdk17-crac |
>= 17.0.13_p13-r0, < 17.0.16_p13-r0 Fix: upgrade to 17.0.16_p13-r0
|
| BellSoft Hardened Containers:23 | bellsoft | openjdk17-lite |
>= 17.0.7_p7-r1, < 17.0.16_p12-r0 Fix: upgrade to 17.0.16_p12-r0
|
| BellSoft Hardened Containers:23 | bellsoft | openjdk21-container-jre |
>= 21_p37-r0, < 21.0.8_p12-r0 Fix: upgrade to 21.0.8_p12-r0
|
| BellSoft Hardened Containers:23 | bellsoft | openjdk21-crac |
>= 21.0.5_p12-r0, < 21.0.8_p13-r0 Fix: upgrade to 21.0.8_p13-r0
|
| BellSoft Hardened Containers:23 | bellsoft | openjdk21-lite |
>= 21_p37-r0, < 21.0.8_p12-r0 Fix: upgrade to 21.0.8_p12-r0
|
| BellSoft Hardened Containers:23 | bellsoft | openjdk24-container-jre |
>= 24_p37-r0, < 24.0.2_p12-r0 Fix: upgrade to 24.0.2_p12-r0
|
| BellSoft Hardened Containers:23 | bellsoft | openjdk24-lite |
>= 24_p37-r0, < 24.0.2_p12-r0 Fix: upgrade to 24.0.2_p12-r0
|
| BellSoft Hardened Containers:23 | bellsoft | openjdk8 |
>= 8u372_p7-r0, < 8.462_p11-r0 Fix: upgrade to 8.462_p11-r0
|
| BellSoft Hardened Containers:23 | bellsoft | openjdk8-perf |
>= 8u392_p9-r1, < 8.462_p12-r0 Fix: upgrade to 8.462_p12-r0
|
Original advisory text
BELL-CVE-2025-24855
References
- https://docs.bell-sw.com/security/cves/CVE-2025-24855 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published14 Mar 2025
Updated6 May 2026
First seen6 May 2026
Track software like this
Free during beta