Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Debian 9 Stretch DLA-2606-1 Moderate: lxml XSS Threat and Fix

debian lts
Calendar Grey March 24, 2021
Dist Debian Esm H88
Debian LTS Advisory DLA-2607-1 fixes security flaws in libxml2; recommended update improves reliability and protection.
An issue has been found in lxml, a pythonic binding for the libxml2 and libxslt libraries
Topics%20covered

Topics Covered

security advisory moderate debian package update xss python lxml moderate vulnerability

Summary

An issue has been found in lxml, a pythonic binding for the libxml2 and
libxslt libraries.

Due to missing input sanitization, XSS is possible for the HTML5
formaction attribute.


For Debian 9 stretch, this problem has been fixed in version
3.7.1-1+deb9u4.

We recommend that you upgrade your lxml packages.

For the detailed security status of lxml please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/lxml

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
important
Lowest
Low
Medium
High
Critical

Package: lxml
Version: 3.7.1-1+deb9u4
CVE ID: CVE-2021-28957

Topics%20covered

Topics Covered

security advisory moderate debian package update xss python lxml moderate vulnerability

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here