Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseOPENSUSE-SU-2022:0803-1
HistoryMar 10, 2022 - 12:00 a.m.

Security update for python-lxml (important)

2022-03-1000:00:00
lists.opensuse.org
44

0.006 Low

EPSS

Percentile

78.0%

JSON

An update that fixes four vulnerabilities is now available.

Description:

This update for python-lxml fixes the following issues:

  • CVE-2018-19787: Fixed XSS vulnerability via unescaped URL (bsc#1118088).
  • CVE-2021-28957: Fixed XSS vulnerability ia HTML5 attributes unescaped
    (bsc#1184177).
  • CVE-2021-43818: Fixed XSS vulnerability via script content in SVG images
    using data URIs (bnc#1193752).
  • CVE-2020-27783: Fixed mutation XSS with improper parser use
    (bnc#1179534).

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.4:

    zypper in -t patch openSUSE-SLE-15.4-2022-803=1

  • openSUSE Leap 15.3:

    zypper in -t patch openSUSE-SLE-15.3-2022-803=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.4aarch64< - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):.aarch64.rpm
openSUSE Leap15.4ppc64le< - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):.ppc64le.rpm
openSUSE Leap15.4s390x< - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):.s390x.rpm
openSUSE Leap15.4x86_64< - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):.x86_64.rpm
openSUSE Leap15.3aarch64< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.aarch64.rpm
openSUSE Leap15.3ppc64le< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.ppc64le.rpm
openSUSE Leap15.3s390x< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.s390x.rpm
openSUSE Leap15.3x86_64< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.x86_64.rpm

Related

openvas 53
nessus 59
debian 6
osv 18
suse 1
amazon 3
photon 2
gentoo 1
veracode 3
ubuntu 5
fedora 6
cbl_mariner 7
mageia 3
ubuntucve 3
rocky 2
github 2
prion 2
alpinelinux 2
redhatcve 2
debiancve 3
archlinux 1
redhat 3
cvelist 3
oraclelinux 2
cve 2
nvd 1
almalinux 2
ibm 1
redos 1
openvas
openvas
openSUSE: Security Advisory for python-lxml (openSUSE-SU-2022:0803-1)
2022-03-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0895-1)
2022-03-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0803-1)
2022-03-11 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 Security Update : python-lxml (SUSE-SU-2022:0803-1)
2022-03-11 00:00:00
RHEL 6 : python-lxml (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 7 : python-lxml (Unpatched Vulnerability)
2024-05-11 00:00:00
debian
debian
[SECURITY] [DLA 2467-1] lxml security update
2020-11-26 18:32:53
[SECURITY] [DSA 4810-1] lxml security update
2020-12-13 18:19:20
[SECURITY] [DLA 2467-2] lxml regression update
2020-12-18 13:14:42
osv
osv
lxml - security update
2020-11-26 00:00:00
Moderate: python-lxml security update
2021-05-18 06:21:26
lxml vulnerability
2021-04-08 12:46:21
suse
suse
Security update for python-lxml (moderate)
2022-11-01 00:00:00
amazon
amazon
Important: python-lxml
2023-03-17 15:53:00
Medium: python-lxml
2021-06-16 20:37:00
Important: python-lxml
2023-02-17 00:12:00
photon
photon
Moderate Photon OS Security Update - PHSA-2021-0072
2021-07-28 00:00:00
Moderate Photon OS Security Update - PHSA-2021-4.0-0072
2021-07-29 00:00:00
gentoo
gentoo
lxml: Multiple Vulnerabilities
2022-08-10 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2018-09-19 01:17:20
Cross-site Scripting (XSS)
2021-03-22 05:25:18
Cross-site Scripting (XSS)
2020-11-30 02:54:37
ubuntu
ubuntu
lxml vulnerability
2018-12-10 00:00:00
lxml vulnerability
2018-12-10 00:00:00
lxml vulnerability
2020-12-09 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: python-lxml-4.2.5-1.fc29
2018-12-21 19:42:19
[SECURITY] Fedora 28 Update: python-lxml-4.2.5-1.fc28
2019-01-03 02:27:09
[SECURITY] Fedora 32 Update: python-lxml-4.4.1-5.fc32
2021-01-14 01:43:47
cbl_mariner
cbl_mariner
CVE-2018-19787 affecting package python-lxml 4.2.4-7
2021-08-11 06:39:25
CVE-2018-19787 affecting package python-lxml for versions less than 4.8.0-1
2022-04-26 19:57:36
CVE-2020-27783 affecting package python-lxml 4.2.4-7
2021-08-11 06:39:25
mageia
mageia
Updated python-lxml packages fix security vulnerability
2019-01-01 01:42:09
Updated python-lxml packages fix a security vulnerability
2021-01-17 19:07:01
Updated python-lxml packages fix a security vulnerability
2021-06-14 00:32:39
ubuntucve
ubuntucve
CVE-2021-28957
2021-03-21 00:00:00
CVE-2020-27783
2020-12-03 00:00:00
CVE-2021-43818
2021-12-13 00:00:00
rocky
rocky
python-lxml security update
2021-11-09 08:26:20
python-lxml security update
2021-05-18 06:21:26
github
github
lxml vulnerable to Cross-Site Scripting
2021-03-22 16:53:53
lxml vulnerable to Cross-site Scripting
2021-01-07 21:54:01
prion
prion
Cross site scripting
2021-03-21 05:15:00
Cross site scripting
2020-12-03 17:15:00
alpinelinux
alpinelinux
CVE-2021-28957
2021-03-21 05:15:13
CVE-2020-27783
2020-12-03 17:15:13
redhatcve
redhatcve
CVE-2021-28957
2021-03-22 10:58:48
CVE-2020-27783
2020-11-25 17:22:50
debiancve
debiancve
CVE-2021-28957
2021-03-21 05:15:13
CVE-2020-27783
2020-12-03 17:15:13
CVE-2021-43818
2021-12-13 18:15:08
archlinux
archlinux
[ASA-202012-1] python-lxml: cross-site scripting
2020-12-05 00:00:00
redhat
redhat
(RHSA-2021:1898) Moderate: python-lxml security update
2021-05-18 06:21:26
(RHSA-2021:4158) Moderate: python-lxml security update
2021-11-09 08:26:20
(RHSA-2022:1664) Moderate: Red Hat Software Collections security update
2022-05-02 07:48:56
cvelist
cvelist
CVE-2020-27783
2020-12-03 16:39:41
CVE-2021-28957
2021-03-21 04:39:35
CVE-2021-43818 HTML Cleaner allows crafted and SVG embedded scripts to pass through
2021-12-13 18:05:12
oraclelinux
oraclelinux
python-lxml security update
2021-05-25 00:00:00
python-lxml security update
2022-05-17 00:00:00
cve
cve
CVE-2020-27783
2020-12-03 17:15:13
CVE-2021-43818
2021-12-13 18:15:08
nvd
nvd
CVE-2020-27783
2020-12-03 17:15:13
almalinux
almalinux
Moderate: python-lxml security update
2021-11-09 08:26:20
Moderate: python-lxml security update
2022-05-10 08:08:19
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security restrictions bypass in lxml (CVE-2021-43818)
2023-01-12 21:59:00
redos
redos
ROS-20220125-14
2022-01-25 00:00:00

0.006 Low

EPSS

Percentile

78.0%

JSON
Related for OPENSUSE-SU-2022:0803-1
openvas53nessus59debian6osv18suse1amazon3photon2gentoo1veracode3ubuntu5fedora6cbl_mariner7mageia3ubuntucve3rocky2github2prion2alpinelinux2redhatcve2debiancve3archlinux1redhat3cvelist3oraclelinux2cve2nvd1almalinux2ibm1redos1