CVE-2021-28957 — lxml vulnerable to Cross-Site Scripting

Description

An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	lxml	4.6.3-1	—
Debian 13	lxml	4.6.3-1	—
Debian 12	lxml	4.6.3-1	—
Debian 10	lxml	4.3.2-1+deb10u3	DSA-4880-1
Debian 9	lxml	3.7.1-1+deb9u4	DLA-2606-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 20.04 LTS	lxml	4.5.0-1ubuntu0.3	USN-4896-1
Ubuntu 18.04 LTS	lxml	4.2.1-1ubuntu0.4	USN-4896-1
Ubuntu 16.04 LTS	lxml	3.5.0-1ubuntu0.4	USN-4896-1

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu Pro 14.04 LTS	lxml	3.3.3-1ubuntu0.2+esm3	USN-4896-2

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 8	Cython +1	0.28.1-7.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4162, RHSA-2021:4160, RHSA-2021:4151
RHEL 8	PyYAML +1	3.12-16.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4162, RHSA-2021:4160, RHSA-2021:4151
RHEL 8	babel +1	2.5.1-10.module+el8.5.0+11014+88fc0d0b	RHSA-2021:4162, RHSA-2021:4151
RHEL 8	mod_wsgi +1	4.6.8-3.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162, RHSA-2021:4160
RHEL 8	numpy +3	1.17.3-6.module+el8.5.0+12205+a865257a	RHSA-2021:4162, RHSA-2021:4160, RHSA-2021:4151
RHEL 8	pybind11 +2	2.6.1-2.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	pytest +1	3.4.2-13.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4162, RHSA-2021:4160, RHSA-2021:4151
RHEL 8	python-PyMySQL +1	0.8.0-10.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4162, RHSA-2021:4160, RHSA-2021:4151
RHEL 8	python-asn1crypto +1	1.2.0-3.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162
RHEL 8	python-atomicwrites +1	1.3.0-8.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162
RHEL 8	python-attrs +1	17.4.0-10.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4162, RHSA-2021:4160, RHSA-2021:4151
RHEL 8	python-backports +1	1.0-16.module+el8.4.0+9193+f3daf6ef	RHSA-2021:4151
RHEL 8	python-backports-ssl_match_hostname +1	3.5.0.1-12.module+el8.4.0+9193+f3daf6ef	RHSA-2021:4151
RHEL 8	python-cffi +1	1.13.2-3.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162, RHSA-2021:4160
RHEL 8	python-chardet +1	3.0.4-10.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4162, RHSA-2021:4160, RHSA-2021:4151
RHEL 8	python-coverage +1	4.5.1-4.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4151
RHEL 8	python-cryptography +1	2.8-3.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162, RHSA-2021:4160
RHEL 8	python-dns +1	1.15.0-10.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4151
RHEL 8	python-docs +2	2.7.16-2.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4151
RHEL 8	python-docutils +1	0.14-12.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4151
RHEL 8	python-funcsigs +1	1.0.2-13.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4151
RHEL 8	python-idna +1	2.5-7.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4162, RHSA-2021:4160, RHSA-2021:4151
RHEL 8	python-iniconfig +1	1.1.1-2.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python-ipaddress +1	1.0.18-6.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4151
RHEL 8	python-jinja2 +1	2.10-9.module+el8.5.0+10541+706bb066	RHSA-2021:4162, RHSA-2021:4151
RHEL 8	python-lxml +1	4.2.3-3.el8	RHSA-2021:4162, RHSA-2021:4160, RHSA-2021:4158
RHEL 8	python-markupsafe +1	0.23-19.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4162, RHSA-2021:4151
RHEL 8	python-mock +1	2.0.0-13.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4151
RHEL 8	python-more-itertools +1	7.2.0-5.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162, RHSA-2021:4160
RHEL 8	python-nose +2	1.3.7-31.module+el8.5.0+12203+77770ab7	RHSA-2021:4151
RHEL 8	python-packaging +1	19.2-3.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162, RHSA-2021:4160
RHEL 8	python-pluggy +1	0.6.0-8.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4162, RHSA-2021:4160, RHSA-2021:4151
RHEL 8	python-ply +1	3.11-10.module+el8.4.0+9579+e9717e18	RHSA-2021:4162, RHSA-2021:4160
RHEL 8	python-psutil +1	5.6.4-4.module+el8.5.0+12031+10ce4870	RHSA-2021:4162, RHSA-2021:4160
RHEL 8	python-psycopg2 +4	2.7.5-7.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4162, RHSA-2021:4160, RHSA-2021:4151
RHEL 8	python-py +1	1.5.3-6.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4162, RHSA-2021:4160, RHSA-2021:4151
RHEL 8	python-pycparser +1	2.19-3.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162, RHSA-2021:4160
RHEL 8	python-pygments +1	2.2.0-22.module+el8.5.0+10788+a4cea9e0	RHSA-2021:4151
RHEL 8	python-pysocks +1	1.6.8-6.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4162, RHSA-2021:4160, RHSA-2021:4151
RHEL 8	python-pytest-mock +1	1.9.0-4.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4151
RHEL 8	python-requests +1	2.20.0-3.module+el8.2.0+4577+feefd9b8	RHSA-2021:4162, RHSA-2021:4160, RHSA-2021:4151
RHEL 8	python-setuptools_scm +1	1.15.7-6.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4151
RHEL 8	python-sqlalchemy +2	1.3.2-2.module+el8.3.0+6647+8d010749	RHSA-2021:4151
RHEL 8	python-toml +1	0.10.1-5.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python-urllib3 +1	1.24.2-3.module+el8.4.0+9193+f3daf6ef	RHSA-2021:4162, RHSA-2021:4160, RHSA-2021:4151
RHEL 8	python-virtualenv +1	15.1.0-21.module+el8.5.0+12203+77770ab7	RHSA-2021:4151
RHEL 8	python-wcwidth +1	0.1.7-16.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162, RHSA-2021:4160
RHEL 8	python-wheel +2	0.33.6-6.module+el8.5.0+12205+a865257a	RHSA-2021:4162, RHSA-2021:4160, RHSA-2021:4151
RHEL 8	python2 +6	2.7.18-7.module+el8.5.0+12203+77770ab7	RHSA-2021:4151
RHEL 8	python2-bson +3	3.7.0-1.module+el8.5.0+10264+e5753a40	RHSA-2021:4151
RHEL 8	python2-lxml	4.2.3-5.module+el8.5.0+10534+22332931	RHSA-2021:4151
RHEL 8	python2-numpy +2	1:1.14.2-16.module+el8.4.0+9406+221a4565	RHSA-2021:4151
RHEL 8	python2-pip +1	9.0.3-18.module+el8.3.0+7707+eb4bba01	RHSA-2021:4151
RHEL 8	python2-rpm-macros	3-38.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4151
RHEL 8	python2-setuptools +1	39.0.1-13.module+el8.4.0+9442+27d0e81c	RHSA-2021:4151
RHEL 8	python2-six	1.11.0-6.module+el8.4.0+9287+299307c7	RHSA-2021:4151
RHEL 8	python2-wheel +1	1:0.31.1-3.module+el8.5.0+12203+77770ab7	RHSA-2021:4151
RHEL 8	python38 +7	3.8.8-4.module+el8.5.0+12205+a865257a	RHSA-2021:4162
RHEL 8	python38-Cython	0.29.14-4.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162
RHEL 8	python38-PyMySQL	0.10.1-1.module+el8.4.0+9692+8e86ab84	RHSA-2021:4162
RHEL 8	python38-attrs	19.3.0-3.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162
RHEL 8	python38-babel	2.7.0-11.module+el8.5.0+11015+9c1c7c42	RHSA-2021:4162
RHEL 8	python38-chardet	3.0.4-19.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162
RHEL 8	python38-idna	2.8-6.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162
RHEL 8	python38-jinja2	2.10.3-5.module+el8.5.0+10542+ba057329	RHSA-2021:4162
RHEL 8	python38-lxml	4.4.1-6.module+el8.5.0+10542+ba057329	RHSA-2021:4162
RHEL 8	python38-markupsafe	1.1.1-6.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162
RHEL 8	python38-pip +2	19.3.1-4.module+el8.5.0+12205+a865257a	RHSA-2021:4162, RHSA-2021:4160
RHEL 8	python38-pluggy	0.13.0-3.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162
RHEL 8	python38-psycopg2 +2	2.8.4-4.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162
RHEL 8	python38-py	1.8.0-8.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162
RHEL 8	python38-pyparsing +1	2.4.5-3.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162, RHSA-2021:4160
RHEL 8	python38-pysocks	1.7.1-4.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162
RHEL 8	python38-pytest	4.6.6-3.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162
RHEL 8	python38-pytz	2019.3-3.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162
RHEL 8	python38-pyyaml	5.4.1-1.module+el8.5.0+10721+14d8e0d5	RHSA-2021:4162
RHEL 8	python38-requests	2.22.0-9.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162
RHEL 8	python38-scipy	1.3.1-4.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162
RHEL 8	python38-setuptools +2	41.6.0-5.module+el8.5.0+12205+a865257a	RHSA-2021:4162, RHSA-2021:4160
RHEL 8	python38-six +1	1.12.0-10.module+el8.4.0+8888+89bc7e79	RHSA-2021:4162, RHSA-2021:4160
RHEL 8	python38-urllib3	1.25.7-5.module+el8.5.0+11639+ea5b349d	RHSA-2021:4162
RHEL 8	python39 +7	3.9.6-2.module+el8.5.0+12204+54860423	RHSA-2021:4160
RHEL 8	python39-Cython	0.29.21-5.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-PyMySQL	0.10.1-2.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-attrs	20.3.0-2.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-cffi	1.14.3-2.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-chardet	3.0.4-19.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-cryptography	3.3.1-2.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-idna	2.10-3.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-lxml	4.6.2-3.module+el8.5.0+10536+a233b742	RHSA-2021:4160
RHEL 8	python39-mod_wsgi	4.7.1-4.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-more-itertools	8.5.0-2.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-numpy +2	1.19.4-3.module+el8.5.0+12204+54860423	RHSA-2021:4160
RHEL 8	python39-packaging	20.4-4.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-pip +1	20.2.4-6.module+el8.5.0+12204+54860423	RHSA-2021:4160
RHEL 8	python39-pluggy	0.13.1-3.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-ply	3.11-10.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-psutil	5.8.0-4.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-psycopg2 +2	2.8.6-2.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-py	1.10.0-1.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-pycparser	2.20-3.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-pyparsing	2.4.7-5.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-pysocks	1.7.1-4.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-pytest	6.0.2-2.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-pyyaml	5.4.1-1.module+el8.5.0+10613+59a13ec4	RHSA-2021:4160
RHEL 8	python39-requests	2.25.0-2.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-scipy	1.5.4-3.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-setuptools +1	50.3.2-4.module+el8.5.0+12204+54860423	RHSA-2021:4160
RHEL 8	python39-six	1.15.0-3.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-urllib3	1.25.10-4.module+el8.5.0+11712+ea2d2be1	RHSA-2021:4160
RHEL 8	python39-wcwidth	0.2.5-3.module+el8.4.0+9822+20bf1249	RHSA-2021:4160
RHEL 8	python39-wheel +1	1:0.35.1-4.module+el8.5.0+12204+54860423	RHSA-2021:4160
RHEL 8	pytz +1	2017.2-12.module+el8.1.0+3111+de3f2d8e	RHSA-2021:4162, RHSA-2021:4151
RHEL 8	scipy +1	1.0.0-21.module+el8.5.0+10858+05337455	RHSA-2021:4162, RHSA-2021:4160, RHSA-2021:4151
RHEL 3	rh-python38-babel +1	2.7.0-12.el7	RHSA-2021:3254
RHEL 3	rh-python38-python +8	3.8.11-2.el7	RHSA-2021:3254
RHEL 3	rh-python38-python-cryptography	2.8-5.el7	RHSA-2021:3254
RHEL 3	rh-python38-python-jinja2	2.10.3-6.el7	RHSA-2021:3254
RHEL 3	rh-python38-python-lxml	4.4.1-7.el7	RHSA-2021:3254
RHEL 3	rh-python38-python-pip +1	19.3.1-2.el7	RHSA-2021:3254
RHEL 3	rh-python38-python-urllib3	1.25.7-7.el7	RHSA-2021:3254

AlmaLinux

Errata ↗

Release	Package	Fixed in	Advisory
AlmaLinux 8	babel +1	2.5.1-10.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python-nose-docs	1.3.7-31.module_el8.5.0+2569+5c5719bc	ALSA-2021:4151
AlmaLinux 8	python-sqlalchemy-doc	1.3.2-2.module_el8.5.0+2569+5c5719bc	ALSA-2021:4151
AlmaLinux 8	python2-Cython	0.28.1-7.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-PyMySQL	0.8.0-10.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-attrs	17.4.0-10.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-backports	1.0-16.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-backports-ssl_match_hostname	3.5.0.1-12.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-bson +2	3.7.0-1.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-chardet	3.0.4-10.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-coverage	4.5.1-4.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-dns	1.15.0-10.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-docs +1	2.7.16-2.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-docutils	0.14-12.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-funcsigs	1.0.2-13.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-idna	2.5-7.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-ipaddress	1.0.18-6.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-jinja2	2.10-9.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-markupsafe	0.23-19.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-mock	2.0.0-13.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-nose	1.3.7-31.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-numpy +2	1:1.14.2-16.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-pluggy	0.6.0-8.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-psycopg2 +3	2.7.5-7.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-py	1.5.3-6.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-pygments	2.2.0-22.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-pysocks	1.6.8-6.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-pytest	3.4.2-13.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-pytest-mock	1.9.0-4.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-pytz	2017.2-12.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-pyyaml	3.12-16.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-requests	2.20.0-3.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-rpm-macros	3-38.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-scipy	1.0.0-21.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-setuptools +1	39.0.1-13.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-setuptools_scm	1.15.7-6.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-six	1.11.0-6.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-sqlalchemy	1.3.2-2.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-urllib3	1.24.2-3.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-virtualenv	15.1.0-21.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python2-wheel +1	1:0.31.1-3.module_el8.6.0+2781+fed64c13	ALSA-2021:4151
AlmaLinux 8	python3-lxml	4.2.3-3.el8	ALSA-2021:4158
AlmaLinux 8	python38-Cython	0.29.14-4.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-PyMySQL	0.10.1-1.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-asn1crypto	1.2.0-3.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-atomicwrites	1.3.0-8.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-attrs	19.3.0-3.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-babel	2.7.0-11.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-cffi	1.13.2-3.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-chardet	3.0.4-19.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-cryptography	2.8-3.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-idna	2.8-6.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-jinja2	2.10.3-5.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-markupsafe	1.1.1-6.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-mod_wsgi	4.6.8-3.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-more-itertools	7.2.0-5.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-numpy +2	1.17.3-6.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-packaging	19.2-3.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-pluggy	0.13.0-3.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-ply	3.11-10.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-psutil	5.6.4-4.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-psycopg2 +2	2.8.4-4.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-py	1.8.0-8.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-pycparser	2.19-3.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-pyparsing	2.4.5-3.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-pysocks	1.7.1-4.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-pytest	4.6.6-3.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-pytz	2019.3-3.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-pyyaml	5.4.1-1.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-requests	2.22.0-9.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-scipy	1.3.1-4.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-setuptools +1	41.6.0-5.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-six	1.12.0-10.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-urllib3	1.25.7-5.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-wcwidth	0.1.7-16.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python38-wheel +1	0.33.6-6.module_el8.6.0+2778+cd494b30	ALSA-2021:4162
AlmaLinux 8	python39-Cython	0.29.21-5.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-PyMySQL	0.10.1-2.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-attrs	20.3.0-2.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-cffi	1.14.3-2.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-chardet	3.0.4-19.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-cryptography	3.3.1-2.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-idna	2.10-3.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-iniconfig	1.1.1-2.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-mod_wsgi	4.7.1-4.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-more-itertools	8.5.0-2.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-numpy +2	1.19.4-3.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-packaging	20.4-4.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-pluggy	0.13.1-3.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-ply	3.11-10.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-psutil	5.8.0-4.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-psycopg2 +2	2.8.6-2.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-py	1.10.0-1.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-pycparser	2.20-3.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-pyparsing	2.4.7-5.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-pysocks	1.7.1-4.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-pytest	6.0.2-2.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-pyyaml	5.4.1-1.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-requests	2.25.0-2.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-scipy	1.5.4-3.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-setuptools +1	50.3.2-4.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-six	1.15.0-3.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-toml	0.10.1-5.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-urllib3	1.25.10-4.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-wcwidth	0.2.5-3.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160
AlmaLinux 8	python39-wheel +1	1:0.35.1-4.module_el8.6.0+2780+a40f65e1	ALSA-2021:4160

Rocky Linux

Errata ↗

Release	Package	Fixed in	Advisory
Rocky Linux 8	Cython	0.28.1-7.module+el8.4.0+403+9ae17a31	RLSA-2021:4162, RLSA-2021:4160, RLSA-2021:4151
Rocky Linux 8	PyYAML	3.12-16.module+el8.4.0+403+9ae17a31	RLSA-2021:4162, RLSA-2021:4160, RLSA-2021:4151
Rocky Linux 8	babel	2.5.1-10.module+el8.5.0+706+735ec4b3	RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8	mod_wsgi	4.6.8-3.module+el8.4.0+570+c2eaf144	RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8	numpy	1.17.3-6.module+el8.5.0+672+ab6eb015	RLSA-2021:4162, RLSA-2021:4160, RLSA-2021:4151
Rocky Linux 8	pybind11	2.6.1-2.module+el8.4.0+574+843c4898	RLSA-2021:4160
Rocky Linux 8	pytest	3.4.2-13.module+el8.4.0+403+9ae17a31	RLSA-2021:4162, RLSA-2021:4160, RLSA-2021:4151
Rocky Linux 8	python-PyMySQL	0.8.0-10.module+el8.3.0+120+426d8baf	RLSA-2021:4162, RLSA-2021:4160, RLSA-2021:4151
Rocky Linux 8	python-asn1crypto	1.2.0-3.module+el8.4.0+570+c2eaf144	RLSA-2021:4162
Rocky Linux 8	python-atomicwrites	1.3.0-8.module+el8.4.0+570+c2eaf144	RLSA-2021:4162
Rocky Linux 8	python-attrs	17.4.0-10.module+el8.4.0+403+9ae17a31	RLSA-2021:4162, RLSA-2021:4160, RLSA-2021:4151
Rocky Linux 8	python-backports	1.0-16.module+el8.4.0+403+9ae17a31	RLSA-2021:4151
Rocky Linux 8	python-backports-ssl_match_hostname	3.5.0.1-12.module+el8.4.0+403+9ae17a31	RLSA-2021:4151
Rocky Linux 8	python-cffi	1.13.2-3.module+el8.4.0+570+c2eaf144	RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8	python-chardet	3.0.4-10.module+el8.4.0+403+9ae17a31	RLSA-2021:4162, RLSA-2021:4160, RLSA-2021:4151
Rocky Linux 8	python-coverage	4.5.1-4.module+el8.4.0+403+9ae17a31	RLSA-2021:4151
Rocky Linux 8	python-cryptography	2.8-3.module+el8.4.0+570+c2eaf144	RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8	python-dns	1.15.0-10.el8	RLSA-2021:4151
Rocky Linux 8	python-docs	2.7.16-2.module+el8.4.0+403+9ae17a31	RLSA-2021:4151
Rocky Linux 8	python-docutils	0.14-12.module+el8.3.0+120+426d8baf	RLSA-2021:4151
Rocky Linux 8	python-funcsigs	1.0.2-13.module+el8.4.0+403+9ae17a31	RLSA-2021:4151
Rocky Linux 8	python-idna	2.5-7.module+el8.4.0+403+9ae17a31	RLSA-2021:4162, RLSA-2021:4160, RLSA-2021:4151
Rocky Linux 8	python-iniconfig	1.1.1-2.module+el8.4.0+574+843c4898	RLSA-2021:4160
Rocky Linux 8	python-ipaddress	1.0.18-6.module+el8.4.0+403+9ae17a31	RLSA-2021:4151
Rocky Linux 8	python-jinja2	2.10-9.module+el8.5.0+706+735ec4b3	RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8	python-lxml	4.2.3-3.el8	RLSA-2021:4162, RLSA-2021:4160, RLSA-2021:4158
Rocky Linux 8	python-markupsafe	0.23-19.el8	RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8	python-mock	2.0.0-13.module+el8.4.0+403+9ae17a31	RLSA-2021:4151
Rocky Linux 8	python-more-itertools	7.2.0-5.module+el8.4.0+570+c2eaf144	RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8	python-nose	1.3.7-31.module+el8.5.0+671+195e4563	RLSA-2021:4151
Rocky Linux 8	python-packaging	19.2-3.module+el8.4.0+570+c2eaf144	RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8	python-pluggy	0.6.0-8.module+el8.4.0+403+9ae17a31	RLSA-2021:4162, RLSA-2021:4160, RLSA-2021:4151
Rocky Linux 8	python-ply	3.11-10.module+el8.4.0+570+c2eaf144	RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8	python-psutil	5.6.4-4.module+el8.5.0+672+ab6eb015	RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8	python-psycopg2	2.7.5-7.el8	RLSA-2021:4162, RLSA-2021:4160, RLSA-2021:4151
Rocky Linux 8	python-py	1.5.3-6.module+el8.4.0+403+9ae17a31	RLSA-2021:4162, RLSA-2021:4160, RLSA-2021:4151
Rocky Linux 8	python-pycparser	2.19-3.module+el8.4.0+570+c2eaf144	RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8	python-pygments	2.2.0-22.module+el8.5.0+671+195e4563	RLSA-2021:4151
Rocky Linux 8	python-pymongo	3.7.0-1.module+el8.4.0+597+ddf0ddea	RLSA-2021:4151
Rocky Linux 8	python-pysocks	1.6.8-6.module+el8.4.0+403+9ae17a31	RLSA-2021:4162, RLSA-2021:4160, RLSA-2021:4151
Rocky Linux 8	python-pytest-mock	1.9.0-4.module+el8.4.0+403+9ae17a31	RLSA-2021:4151
Rocky Linux 8	python-requests	2.20.0-3.module+el8.4.0+403+9ae17a31	RLSA-2021:4162, RLSA-2021:4160, RLSA-2021:4151
Rocky Linux 8	python-setuptools_scm	1.15.7-6.module+el8.4.0+403+9ae17a31	RLSA-2021:4151
Rocky Linux 8	python-sqlalchemy	1.3.2-2.module+el8.3.0+120+426d8baf	RLSA-2021:4151
Rocky Linux 8	python-toml	0.10.1-5.module+el8.4.0+574+843c4898	RLSA-2021:4160
Rocky Linux 8	python-urllib3	1.24.2-3.module+el8.4.0+403+9ae17a31	RLSA-2021:4162, RLSA-2021:4160, RLSA-2021:4151
Rocky Linux 8	python-virtualenv	15.1.0-21.module+el8.5.0+671+195e4563	RLSA-2021:4151
Rocky Linux 8	python-wcwidth	0.1.7-16.module+el8.4.0+570+c2eaf144	RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8	python-wheel	0.33.6-6.module+el8.5.0+672+ab6eb015	RLSA-2021:4162, RLSA-2021:4160, RLSA-2021:4151
Rocky Linux 8	python2	2.7.18-7.module+el8.5.0+706+735ec4b3.rocky.0.1	RLSA-2021:4151
Rocky Linux 8	python2-pip	9.0.3-18.module+el8.4.0+403+9ae17a31	RLSA-2021:4151
Rocky Linux 8	python2-rpm-macros	3-38.module+el8.4.0+403+9ae17a31	RLSA-2021:4151
Rocky Linux 8	python2-setuptools	39.0.1-13.module+el8.4.0+403+9ae17a31	RLSA-2021:4151
Rocky Linux 8	python2-six	1.11.0-6.module+el8.4.0+403+9ae17a31	RLSA-2021:4151
Rocky Linux 8	python38	3.8.8-4.module+el8.5.0+672+ab6eb015	RLSA-2021:4162
Rocky Linux 8	python39	3.9.6-2.module+el8.5.0+673+10283621	RLSA-2021:4160
Rocky Linux 8	python3x-pip	19.3.1-4.module+el8.5.0+672+ab6eb015	RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8	python3x-pyparsing	2.4.5-3.module+el8.4.0+570+c2eaf144	RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8	python3x-setuptools	41.6.0-5.module+el8.5.0+672+ab6eb015	RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8	python3x-six	1.12.0-10.module+el8.4.0+570+c2eaf144	RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8	pytz	2017.2-12.module+el8.4.0+403+9ae17a31	RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8	scipy	1.0.0-21.module+el8.5.0+671+195e4563	RLSA-2021:4162, RLSA-2021:4160, RLSA-2021:4151

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP3	python-lxml	4.7.1-3.7.1	SUSE-SU-2022:0803-1
SLES 15 SP2	python-lxml	4.7.1-3.7.1	SUSE-SU-2022:0803-1
SLES 12 SP5	python-lxml	3.6.1-8.5.1	SUSE-SU-2022:0895-1
SLES 12 SP5	python3-lxml	3.6.1-3.6.1	SUSE-SU-2022:3937-1
SLES 12	python3-lxml	3.3.5-3.15.1	SUSE-SU-2022:3934-1
SLES 2	python-lxml	4.7.1-3.7.1	SUSE-SU-2022:0803-1

Show 13 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLES for SAP 15 SP2	python-lxml	4.7.1-3.7.1	SUSE-SU-2022:0803-1
SLES for SAP 12 SP5	python-lxml	3.6.1-8.5.1	SUSE-SU-2022:0895-1
SLES for SAP 12 SP5	python3-lxml	3.6.1-3.6.1	SUSE-SU-2022:3937-1
SLE Real Time 15 SP2	python-lxml	4.7.1-3.7.1	SUSE-SU-2022:0803-1
SLE HPC 15 SP2	python-lxml	4.7.1-3.7.1	SUSE-SU-2022:0803-1
SUSE OpenStack Cloud Crowbar 9	grafana	6.7.4-3.26.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	openstack-barbican	7.0.1~dev24-3.14.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	openstack-cinder	13.0.10~dev24-3.34.2	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	openstack-heat-gbp	14.0.1~dev4-3.9.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	openstack-horizon-plugin-gbp-ui	14.0.1~dev3-3.9.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	openstack-ironic	11.1.5~dev18-3.28.2	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	openstack-keystone	14.2.1~dev9-3.28.2	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	openstack-neutron	13.0.8~dev206-3.40.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	openstack-neutron-gbp	14.0.1~dev33-3.31.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	python-Pillow	5.2.0-3.17.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	python-XStatic-jquery-ui	1.13.0.1-4.3.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	python-lxml	4.2.4-3.3.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	release-notes-suse-openstack-cloud	9.20220413-3.30.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	rubygem-sinatra	1.4.6-4.3.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 8	python-lxml	3.6.1-8.5.1	SUSE-SU-2022:0895-1
SUSE OpenStack Cloud 9	ardana-barbican	9.0+git.1644879908.8a641c1-3.13.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	grafana	6.7.4-3.26.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	openstack-barbican	7.0.1~dev24-3.14.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	openstack-cinder	13.0.10~dev24-3.34.2	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	openstack-heat-gbp	14.0.1~dev4-3.9.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	openstack-horizon-plugin-gbp-ui	14.0.1~dev3-3.9.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	openstack-ironic	11.1.5~dev18-3.28.2	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	openstack-keystone	14.2.1~dev9-3.28.2	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	openstack-neutron	13.0.8~dev206-3.40.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	openstack-neutron-gbp	14.0.1~dev33-3.31.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	python-Pillow	5.2.0-3.17.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	python-XStatic-jquery-ui	1.13.0.1-4.3.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	python-lxml	4.2.4-3.3.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	release-notes-suse-openstack-cloud	9.20220413-3.30.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-barbican	7.0.1~dev24-3.35.2	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-cinder	13.0.10~dev24-3.38.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-designate	7.0.2~dev2-3.35.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-glance	17.0.1~dev30-3.33.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-heat	11.0.4~dev4-3.35.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-horizon	14.1.1~dev11-4.39.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-ironic	11.1.5~dev18-4.33.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-keystone	14.2.1~dev9-3.36.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-magnum	7.2.1~dev1-4.35.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-manila	7.4.2~dev60-3.41.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-monasca	2.7.1~dev10-3.37.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-monasca-ceilometer	1.8.2~dev3-3.35.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-neutron	13.0.8~dev206-6.39.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-nova	18.3.1~dev91-3.39.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-octavia	3.2.3~dev7-4.35.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-sahara	9.0.2~dev15-3.35.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-swift	2.19.2~dev48-2.30.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 8	python-lxml	3.6.1-8.5.1	SUSE-SU-2022:0895-1
SUSE Manager Server 4.1	python-lxml	4.7.1-3.7.1	SUSE-SU-2022:0803-1
SUSE Manager Retail Branch Server 4.1	python-lxml	4.7.1-3.7.1	SUSE-SU-2022:0803-1
SUSE Manager Proxy 4.1	python-lxml	4.7.1-3.7.1	SUSE-SU-2022:0803-1
SUSE HPE Helion OpenStack 8	python-lxml	3.6.1-8.5.1	SUSE-SU-2022:0895-1
SUSE Enterprise Storage 7	python-lxml	4.7.1-3.7.1	SUSE-SU-2022:0803-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	translate-toolkit	3.3.6-1.3	openSUSE-SU-2025:14647-1, openSUSE-SU-2024:11473-1
openSUSE Leap 15.3	python-lxml	4.0.0-150000.4.3.1	openSUSE-SU-2022:0803-1, SUSE-SU-2022:3836-1

Alpine

Security tracker ↗

Release	Package	Fixed in	Advisory
Alpine v3.24	py3-lxml	4.6.3-r0	—
Alpine v3.23	py3-lxml	4.6.3-r0	—
Alpine v3.22	py3-lxml	4.6.3-r0	—
Alpine v3.21	py3-lxml	4.6.3-r0	—
Alpine v3.20	py3-lxml	4.6.3-r0	—

Show 7 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Alpine v3.19	py3-lxml	4.6.3-r0	—
Alpine v3.18	py3-lxml	4.6.3-r0	—
Alpine v3.17	py3-lxml	4.6.3-r0	—
Alpine v3.16	py3-lxml	4.6.3-r0	—
Alpine v3.15	py3-lxml	4.6.3-r0	—
Alpine v3.14	py3-lxml	4.6.3-r0	—
Alpine v3.13	py3-lxml	4.6.3-r0	—

Amazon Linux

Release	Package	Fixed in	Advisory
Amazon Linux 2	python-lxml +2	3.2.1-4.amzn2.0.6	ALAS2-2024-2620

Azure Linux

Release	Package	Fixed in	Advisory
Azure Linux 2 (CBL-Mariner)	python-lxml	4.8.0-1	—

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 8	babel +1	2.5.1-10.module+el8.5.0+20361+8a9d3d27	ELSA-2021-4151
Oracle Linux 8	python2 +6	2.7.18-7.0.1.module+el8.5.0+20361+8a9d3d27	ELSA-2021-4151
Oracle Linux 8	python2-Cython	0.28.1-7.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-PyMySQL	0.8.0-10.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-attrs	17.4.0-10.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-backports	1.0-16.module+el8.4.0+20050+79c7b4ee	ELSA-2021-4151
Oracle Linux 8	python2-backports-ssl_match_hostname	3.5.0.1-12.module+el8.4.0+20050+79c7b4ee	ELSA-2021-4151
Oracle Linux 8	python2-bson +2	3.7.0-1.module+el8.5.0+20361+8a9d3d27	ELSA-2021-4151
Oracle Linux 8	python2-chardet	3.0.4-10.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-coverage	4.5.1-4.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-dns	1.15.0-10.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-docs +1	2.7.16-2.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-docutils	0.14-12.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-funcsigs	1.0.2-13.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-idna	2.5-7.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-ipaddress	1.0.18-6.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-jinja2	2.10-9.module+el8.5.0+20361+8a9d3d27	ELSA-2021-4151
Oracle Linux 8	python2-lxml	4.2.3-5.module+el8.5.0+20361+8a9d3d27	ELSA-2021-4151
Oracle Linux 8	python2-markupsafe	0.23-19.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-mock	2.0.0-13.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-nose +1	1.3.7-31.module+el8.5.0+20361+8a9d3d27	ELSA-2021-4151
Oracle Linux 8	python2-numpy +2	1:1.14.2-16.module+el8.4.0+20050+79c7b4ee	ELSA-2021-4151
Oracle Linux 8	python2-pip +1	9.0.3-18.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-pluggy	0.6.0-8.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-psycopg2 +3	2.7.5-7.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-py	1.5.3-6.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-pygments	2.2.0-22.module+el8.5.0+20361+8a9d3d27	ELSA-2021-4151
Oracle Linux 8	python2-pysocks	1.6.8-6.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-pytest	3.4.2-13.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-pytest-mock	1.9.0-4.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-pytz	2017.2-12.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-pyyaml	3.12-16.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-requests	2.20.0-3.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-rpm-macros	3-38.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-scipy	1.0.0-21.module+el8.5.0+20361+8a9d3d27	ELSA-2021-4151
Oracle Linux 8	python2-setuptools +1	39.0.1-13.module+el8.4.0+20050+79c7b4ee	ELSA-2021-4151
Oracle Linux 8	python2-setuptools_scm	1.15.7-6.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-six	1.11.0-6.module+el8.4.0+20050+79c7b4ee	ELSA-2021-4151
Oracle Linux 8	python2-sqlalchemy +1	1.3.2-2.module+el8.3.0+7833+4aaf98ce	ELSA-2021-4151
Oracle Linux 8	python2-urllib3	1.24.2-3.module+el8.4.0+20050+79c7b4ee	ELSA-2021-4151
Oracle Linux 8	python2-virtualenv	15.1.0-21.module+el8.5.0+20361+8a9d3d27	ELSA-2021-4151
Oracle Linux 8	python2-wheel +1	1:0.31.1-3.module+el8.5.0+20361+8a9d3d27	ELSA-2021-4151
Oracle Linux 8	python3-olamkit +2	1.0.2-1.el8	ELSA-2022-9341
Oracle Linux 8	python38 +7	3.8.8-4.module+el8.5.0+20371+4f24d723	ELSA-2021-4162
Oracle Linux 8	python38-Cython	0.29.14-4.module+el8.4.0+20068+32a535e2	ELSA-2021-4162
Oracle Linux 8	python38-PyMySQL	0.10.1-1.module+el8.4.0+20068+32a535e2	ELSA-2021-4162
Oracle Linux 8	python38-asn1crypto	1.2.0-3.module+el8.4.0+20068+32a535e2	ELSA-2021-4162
Oracle Linux 8	python38-atomicwrites	1.3.0-8.module+el8.2.0+5579+085cd3bd	ELSA-2021-4162
Oracle Linux 8	python38-attrs	19.3.0-3.module+el8.2.0+5579+085cd3bd	ELSA-2021-4162
Oracle Linux 8	python38-babel	2.7.0-11.module+el8.5.0+20371+4f24d723	ELSA-2021-4162
Oracle Linux 8	python38-cffi	1.13.2-3.module+el8.4.0+20068+32a535e2	ELSA-2021-4162
Oracle Linux 8	python38-chardet	3.0.4-19.module+el8.4.0+20068+32a535e2	ELSA-2021-4162
Oracle Linux 8	python38-cryptography	2.8-3.module+el8.4.0+20068+32a535e2	ELSA-2021-4162
Oracle Linux 8	python38-idna	2.8-6.module+el8.4.0+20068+32a535e2	ELSA-2021-4162
Oracle Linux 8	python38-jinja2	2.10.3-5.module+el8.5.0+20371+4f24d723	ELSA-2021-4162
Oracle Linux 8	python38-lxml	4.4.1-6.module+el8.5.0+20371+4f24d723	ELSA-2021-4162
Oracle Linux 8	python38-markupsafe	1.1.1-6.module+el8.4.0+20068+32a535e2	ELSA-2021-4162
Oracle Linux 8	python38-mod_wsgi	4.6.8-3.module+el8.4.0+20068+32a535e2	ELSA-2021-4162
Oracle Linux 8	python38-more-itertools	7.2.0-5.module+el8.2.0+5579+085cd3bd	ELSA-2021-4162
Oracle Linux 8	python38-numpy +2	1.17.3-6.module+el8.5.0+20371+4f24d723	ELSA-2021-4162
Oracle Linux 8	python38-packaging	19.2-3.module+el8.2.0+5579+085cd3bd	ELSA-2021-4162
Oracle Linux 8	python38-pip +1	19.3.1-4.module+el8.5.0+20371+4f24d723	ELSA-2021-4162
Oracle Linux 8	python38-pluggy	0.13.0-3.module+el8.2.0+5579+085cd3bd	ELSA-2021-4162
Oracle Linux 8	python38-ply	3.11-10.module+el8.4.0+20068+32a535e2	ELSA-2021-4162
Oracle Linux 8	python38-psutil	5.6.4-4.module+el8.5.0+20371+4f24d723	ELSA-2021-4162
Oracle Linux 8	python38-psycopg2 +2	2.8.4-4.module+el8.4.0+20068+32a535e2	ELSA-2021-4162
Oracle Linux 8	python38-py	1.8.0-8.module+el8.2.0+5579+085cd3bd	ELSA-2021-4162
Oracle Linux 8	python38-pycparser	2.19-3.module+el8.4.0+20068+32a535e2	ELSA-2021-4162
Oracle Linux 8	python38-pyparsing	2.4.5-3.module+el8.2.0+5579+085cd3bd	ELSA-2021-4162
Oracle Linux 8	python38-pysocks	1.7.1-4.module+el8.4.0+20068+32a535e2	ELSA-2021-4162
Oracle Linux 8	python38-pytest	4.6.6-3.module+el8.2.0+5579+085cd3bd	ELSA-2021-4162
Oracle Linux 8	python38-pytz	2019.3-3.module+el8.4.0+20068+32a535e2	ELSA-2021-4162
Oracle Linux 8	python38-pyyaml	5.4.1-1.module+el8.5.0+20371+4f24d723	ELSA-2021-4162
Oracle Linux 8	python38-requests	2.22.0-9.module+el8.4.0+20068+32a535e2	ELSA-2021-4162
Oracle Linux 8	python38-scipy	1.3.1-4.module+el8.4.0+20068+32a535e2	ELSA-2021-4162
Oracle Linux 8	python38-setuptools +1	41.6.0-5.module+el8.5.0+20371+4f24d723	ELSA-2021-4162
Oracle Linux 8	python38-six	1.12.0-10.module+el8.4.0+20068+32a535e2	ELSA-2021-4162
Oracle Linux 8	python38-urllib3	1.25.7-5.module+el8.5.0+20371+4f24d723	ELSA-2021-4162
Oracle Linux 8	python38-wcwidth	0.1.7-16.module+el8.2.0+5579+085cd3bd	ELSA-2021-4162
Oracle Linux 8	python38-wheel +1	0.33.6-6.module+el8.5.0+20371+4f24d723	ELSA-2021-4162
Oracle Linux 8	python39 +7	3.9.6-2.module+el8.5.0+20364+c7fe1181	ELSA-2021-4160
Oracle Linux 8	python39-Cython	0.29.21-5.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-PyMySQL	0.10.1-2.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-attrs	20.3.0-2.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-cffi	1.14.3-2.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-chardet	3.0.4-19.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-cryptography	3.3.1-2.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-idna	2.10-3.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-iniconfig	1.1.1-2.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-lxml	4.6.2-3.module+el8.5.0+20364+c7fe1181	ELSA-2021-4160
Oracle Linux 8	python39-mod_wsgi	4.7.1-4.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-more-itertools	8.5.0-2.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-numpy +2	1.19.4-3.module+el8.5.0+20364+c7fe1181	ELSA-2021-4160
Oracle Linux 8	python39-packaging	20.4-4.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-pip +1	20.2.4-6.module+el8.5.0+20364+c7fe1181	ELSA-2021-4160
Oracle Linux 8	python39-pluggy	0.13.1-3.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-ply	3.11-10.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-psutil	5.8.0-4.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-psycopg2 +2	2.8.6-2.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-py	1.10.0-1.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-pybind11 +1	2.6.1-2.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-pycparser	2.20-3.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-pyparsing	2.4.7-5.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-pysocks	1.7.1-4.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-pytest	6.0.2-2.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-pyyaml	5.4.1-1.module+el8.5.0+20364+c7fe1181	ELSA-2021-4160
Oracle Linux 8	python39-requests	2.25.0-2.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-scipy	1.5.4-3.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-setuptools +1	50.3.2-4.module+el8.5.0+20364+c7fe1181	ELSA-2021-4160
Oracle Linux 8	python39-six	1.15.0-3.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-toml	0.10.1-5.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-urllib3	1.25.10-4.module+el8.5.0+20364+c7fe1181	ELSA-2021-4160
Oracle Linux 8	python39-wcwidth	0.2.5-3.module+el8.4.0+20109+b7b1db01	ELSA-2021-4160
Oracle Linux 8	python39-wheel +1	1:0.35.1-4.module+el8.5.0+20364+c7fe1181	ELSA-2021-4160

Affected packages

Ecosystem	Package	Affected	Fixed	Record
PyPI	lxml	< 4.6.3	4.6.3	GHSA-jq4v-f5q6-mjqq

Advisories 33

ALSA-2021:4162 Moderate: python38:3.8 and python38-devel:3.8 security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2021:4160 Moderate: python39:3.9 and python39-devel:3.9 security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2021:4151 Moderate: python27:2.7 security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2021:4158 Moderate: python-lxml security update AlmaLinux Security Advisories · Oct 29, 2026
RHSA-2021:4151 Red Hat Security Advisory: python27:2.7 security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
RHSA-2021:4162 Red Hat Security Advisory: python38:3.8 and python38-devel:3.8 security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
RHSA-2021:3254 Red Hat Security Advisory: rh-python38 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 15, 2026
RHSA-2021:4160 Red Hat Security Advisory: python39:3.9 and python39-devel:3.9 security update Red Hat Security Advisories (RHSA) · Aug 26, 2026
WID-SEC-2022-0571 Red Hat Enterprise Linux: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 28, 2026
RHSA-2021:4158 Red Hat Security Advisory: python-lxml security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
DSA-4880-1 lxml - security update Debian Security (DSA / DLA) · Mar 9, 2026
DLA-2606-1 lxml - security update Debian Security (DSA / DLA) · Mar 9, 2026
USN-4896-1 lxml vulnerability Ubuntu Security Notices (USN) · Feb 10, 2026
USN-4896-2 lxml vulnerability Ubuntu Security Notices (USN) · Feb 10, 2026
RLSA-2021:4160 Moderate: python39:3.9 and python39-devel:3.9 security update Rocky Linux Security Advisories · Feb 5, 2026
RLSA-2021:4162 Moderate: python38:3.8 and python38-devel:3.8 security update Rocky Linux Security Advisories · Feb 5, 2026
RLSA-2021:4151 Moderate: python27:2.7 security update Rocky Linux Security Advisories · Feb 4, 2026
RLSA-2021:4158 Moderate: python-lxml security update Rocky Linux Security Advisories · Feb 4, 2026
SUSE-SU-2022:3934-1 Security update for python3-lxml SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:0895-1 Security update for python-lxml SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:11473-1 python36-translate-toolkit-3.3.6-1.3 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2025:14647-1 python311-translate-toolkit-3.14.5-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:1729-1 Security update for ardana-barbican, grafana, openstack-barbican, openstack-cinder, openstack-heat-gbp, openstack-horizon-plugin-gbp-ui, openstack-ironic, openstack-keystone, openstack-neutron-gbp, python-lxml, release-notes-suse-openstack-cloud SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2022:0803-1 Security update for python-lxml SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:0803-1 Security update for python-lxml SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:3937-1 Security update for python3-lxml SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:3836-1 Security update for python-lxml SUSE / openSUSE Security Updates · Feb 4, 2026
WID-SEC-2023-0395 Splunk Splunk Enterprise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 18, 2025
ALAS2-2024-2620 Moderate: python-lxml security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Aug 13, 2024
ELSA-2022-9341 Important: ol-automation-manager security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Apr 27, 2022
ELSA-2021-4151 Moderate: python27:2.7 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 16, 2021
ELSA-2021-4162 Moderate: python38:3.8 and python38-devel:3.8 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 16, 2021
ELSA-2021-4160 Moderate: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 16, 2021

References

https://bugs.launchpad.net/lxml/+bug/1888153
https://github.com/lxml/lxml/pull/316/commits/10ec1b4e9f93713513a3264ed6158af22492f270
[debian-lts-announce] 20210324 [SECURITY] [DLA 2606-1] lxml security update mailing-list
DSA-4880 vendor-advisory
FEDORA-2021-28723f9670 vendor-advisory
FEDORA-2021-4cdb0f68c7 vendor-advisory
https://www.oracle.com/security-alerts/cpuoct2021.html
https://github.com/lxml/lxml/commit/a5f9cb52079dc57477c460dbe6ba0f775e14a999
https://security.netapp.com/advisory/ntap-20210521-0004/
GLSA-202208-06 vendor-advisory

EUVD	v3.1	6.1
OSV:GHSA	v3.1	6.1
CISA-ADP	v3.1	6.1