gpp_maybe Security update for python-lxml

SUSE-SLE-Module-Basesystem-15-SP3-2022-803

This update for python-lxml fixes the following issues: - CVE-2018-19787: Fixed XSS vulnerability via unescaped URL (bsc#1118088). - CVE-2021-28957: Fixed XSS vulnerability ia HTML5 attributes unescaped (bsc#1184177). - CVE-2021-43818: Fixed XSS vulnerability via script content in SVG images using data URIs (bnc#1193752). - CVE-2020-27783: Fixed mutation XSS with improper parser use (bnc#1179534).

• Release Date
  Mar 10 2022
• References
  Bugzilla: 1118088, 1184177, 1179534, 1193752
  CVEs: CVE-2021-43818, CVE-2021-28957, CVE-2018-19787, CVE-2020-27783
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.3 aarch64

• Packages
  python-lxml
  Pythonic XML processing library

  4.7.1-3.7.1 lock src

  python3-lxml
  Pythonic XML processing library

  4.7.1-3.7.1 lock rpm

  python3-lxml-devel
  Development files for python-lxml

  4.7.1-3.7.1 lock rpm

Basesystem Module 15.3 ppc64le

• Packages
  python-lxml
  Pythonic XML processing library

  4.7.1-3.7.1 lock src

  python3-lxml
  Pythonic XML processing library

  4.7.1-3.7.1 lock rpm

  python3-lxml-devel
  Development files for python-lxml

  4.7.1-3.7.1 lock rpm

Basesystem Module 15.3 s390x

• Packages
  python-lxml
  Pythonic XML processing library

  4.7.1-3.7.1 lock src

  python3-lxml
  Pythonic XML processing library

  4.7.1-3.7.1 lock rpm

  python3-lxml-devel
  Development files for python-lxml

  4.7.1-3.7.1 lock rpm

Basesystem Module 15.3 x86_64

• Packages
  python-lxml
  Pythonic XML processing library

  4.7.1-3.7.1 lock src

  python3-lxml
  Pythonic XML processing library

  4.7.1-3.7.1 lock rpm

  python3-lxml-devel
  Development files for python-lxml

  4.7.1-3.7.1 lock rpm