alpine · CVE-2024-55549

Quick triage

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2024-55549: 3 source package rows (libxslt, qt5-qtwebengine, qt6-qtwebengine); 40 state rows across 9 repos (3.18-main, 3.19-main, 3.20-main, 3.21-community, 3.21-main, 3.22-community, 3.22-main, edge-community, edge-main); fixed 11, open 29.

Description:

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.