Skip to content
OpenAdvisories
Medium ELSA-2022-8226 1 CVE

Moderate: python-lxml security update (Oracle Linux 9)

Published Nov 22, 2022 · Updated Nov 22, 2022

Ecosystem: Oracle Linux

Summary

[4.6.5-3]
- Security fix for CVE-2022-2309
- Resolves: rhbz#2107571

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 python3-lxml 0:4.6.5-3.el9

Vulnerabilities 1

  • Medium 5.3
    CVE-2022-2309

    NULL Pointer Dereference in lxml/lxml

    NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through fo…

    lxml lxml/lxml libxml2 libxml2 Debian Ubuntu Azure Linux Alpine PyPI