Skip to content
OpenAdvisories
Medium RHSA-2022:8226 1 CVE

Red Hat Security Advisory: python-lxml security update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream python-lxml 0:4.6.5-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream python-lxml-debugsource 0:4.6.5-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-lxml 0:4.6.5-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-lxml-debuginfo 0:4.6.5-3.el9

Vulnerabilities 1

  • Medium 5.3
    CVE-2022-2309

    NULL Pointer Dereference in lxml/lxml

    NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through fo…

    lxml lxml/lxml libxml2 libxml2 Debian Ubuntu Azure Linux Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2107571
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8226.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-2309
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-2309
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-2309