shield Security update for libxslt, libxml2

SUSE-SLE-Micro-6.1-429

This update for libxslt, libxml2 fixes the following issues: libxml2: - CVE-2026-0990: call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811) - CVE-2026-0992: excessive resource consumption when processing XML catalogs due to exponential behavior when handling `<nextCatalog>` elements (bsc#1256808, bsc#1256809, bsc#1256812) - CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247858, bsc#1247850) - CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257593, bsc#1257594, bsc#1257595) - CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553) - CVE-2026-0989: call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth when resolving `<include>` directives (bsc#1256804, bsc#1256805, bsc#1256810) libxslt: - CVE-2025-10911 will be fixed on libxml2 side instead [bsc#1250553]

• Release Date
  Mar 6 2026
• References
  Bugzilla: 1247850, 1247858, 1250553, 1256804, 1256805, 1256807, 1256808, 1256809, 1256810, 1256811, 1256812, 1257593, 1257594, 1257595
  CVEs: CVE-2025-8732, CVE-2025-10911, CVE-2026-0989, CVE-2026-0990, CVE-2026-0992, CVE-2026-1757
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Micro 6.1 aarch64

• Packages
  libexslt0
  EXSLT Library

  1.1.38-slfo.1.1_6.1 lock rpm

  libxml2-2
  A Library to Manipulate XML Files

  2.11.6-slfo.1.1_8.1 lock rpm

  libxml2-tools
  Tools using libxml

  2.11.6-slfo.1.1_8.1 lock rpm

  libxslt1
  XSL Transformation Library

  1.1.38-slfo.1.1_6.1 lock rpm

  python311-libxml2
  Python Bindings for libxml2-python

  2.11.6-slfo.1.1_8.1 lock rpm

SUSE Linux Micro 6.1 ppc64le

• Packages
  libexslt0
  EXSLT Library

  1.1.38-slfo.1.1_6.1 lock rpm

  libxml2-2
  A Library to Manipulate XML Files

  2.11.6-slfo.1.1_8.1 lock rpm

  libxml2-tools
  Tools using libxml

  2.11.6-slfo.1.1_8.1 lock rpm

  libxslt1
  XSL Transformation Library

  1.1.38-slfo.1.1_6.1 lock rpm

  python311-libxml2
  Python Bindings for libxml2-python

  2.11.6-slfo.1.1_8.1 lock rpm

SUSE Linux Micro 6.1 s390x

• Packages
  libexslt0
  EXSLT Library

  1.1.38-slfo.1.1_6.1 lock rpm

  libxml2-2
  A Library to Manipulate XML Files

  2.11.6-slfo.1.1_8.1 lock rpm

  libxml2-tools
  Tools using libxml

  2.11.6-slfo.1.1_8.1 lock rpm

  libxslt1
  XSL Transformation Library

  1.1.38-slfo.1.1_6.1 lock rpm

  python311-libxml2
  Python Bindings for libxml2-python

  2.11.6-slfo.1.1_8.1 lock rpm

SUSE Linux Micro 6.1 x86_64

• Packages
  libexslt0
  EXSLT Library

  1.1.38-slfo.1.1_6.1 lock rpm

  libxml2-2
  A Library to Manipulate XML Files

  2.11.6-slfo.1.1_8.1 lock rpm

  libxml2-tools
  Tools using libxml

  2.11.6-slfo.1.1_8.1 lock rpm

  libxslt1
  XSL Transformation Library

  1.1.38-slfo.1.1_6.1 lock rpm

  python311-libxml2
  Python Bindings for libxml2-python

  2.11.6-slfo.1.1_8.1 lock rpm