Skip to content
OpenAdvisories
Medium ELSA-2022-1932 1 CVE

Moderate: python-lxml security update (Oracle Linux 8)

Published May 17, 2022 · Updated May 17, 2022

Ecosystem: Oracle Linux

Summary

[4.2.3-4]
- Security fix for CVE-2021-43818
Resolves: rhbz#2032569

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 python3-lxml 0:4.2.3-4.el8

Vulnerabilities 1

  • High 8.2
    CVE-2021-43818

    HTML Cleaner allows crafted and SVG embedded scripts to pass through

    lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ th…

    lxml lxml lxml lxml Debian Ubuntu Azure Linux Alpine PyPI