shield Security update for python-lxml

SUSE-SLE-SERVER-12-SP5-2022-895

This update for python-lxml fixes the following issues: - CVE-2021-43818: Removed SVG image data URLs since they can embed script content (bsc#1193752). - CVE-2021-28957: Fixed a potential XSS due to improper input sanitization (bsc#1184177). - CVE-2020-27783: Fixed a potential XSS due to improper HTML parsing (bsc#1179534). - CVE-2018-19787: Fixed a potential XSS due to improper input sanitization (bsc#1118088).

• Release Date
  Mar 17 2022
• References
  Bugzilla: 1118088, 1193752, 1179534, 1184177
  CVEs: CVE-2021-43818, CVE-2020-27783, CVE-2018-19787, CVE-2021-28957
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.5 aarch64

• Packages
  python-lxml
  Powerful and Pythonic XML processing library

  3.6.1-8.5.1

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.5 x86_64

• Packages
  python-lxml
  Powerful and Pythonic XML processing library

  3.6.1-8.5.1

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.5 ppc64le

• Packages
  python-lxml
  Powerful and Pythonic XML processing library

  3.6.1-8.5.1

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.5 s390x

• Packages
  python-lxml
  Powerful and Pythonic XML processing library

  3.6.1-8.5.1

  lock rpm

  lock src