Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Calendar White Jun 05, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

Calendar White Jun 05, 2026
Critical
Suse Large Esm H900
SuSE

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Calendar White Jun 05, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 10 articles for you...
91
Ls Advisories Gentoo Esm H240
Price Tag 1security advisoryGentoonormal severity

Gentoo: 202209-01 Update: sqlalchemy Detected Vulnerability Risks

Multiple vulnerabilities have been discovered in lxml, the worst of which could result in denial of service.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202208-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: lxml: Multiple Vulnerabilities Date: August 10, 2022 Bugs: #777579, #829053, #856598 ID: 202208-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been discovered in lxml, the worst of which could result in denial of service. Background ========= lxml is a Pythonic binding for the libxml2 and libxslt libraries. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-python/lxml < 4.9.1 > = 4.9.1 Description ========== Multiple vulnerabilities have been discovered in lxml. Please review the CVE identifiers referenced below for details. Impact ===== Please review the referenced CVE identifiers for details. Workaround ========= There is no known workaround at this time. Resolution ========= All lxml users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-python/lxml-4.9.1" References ========= [ 1 ] CVE-2021-28957 https://nvd.nist.gov/vuln/detail/CVE-2021-28957 [ 2 ] CVE-2021-43818 https://nvd.nist.gov/vuln/detail/CVE-2021-43818 [ 3 ] CVE-2022-2309 https://nvd.nist.gov/vuln/detail/CVE-2022-2309 [ 4 ] GHSL-2021-1037 [ 5 ] GHSL-2021-1038 Availability =========== This GLSA and any updates to it are available for viewing at theGentoo Security Website: https://security.gentoo.org/glsa/202208-06 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org. License ====== Copyright 2022 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5/ . Debian Security Advisory DSA-2023-08 highlights several security flaws in the numpy library, posing potential data corruption issues. Immediate update advised.. Gentoo Security Advisory, lxml vulnerabilities, software update. . LinuxSecurity.com Team

Calendar 2 Aug 09, 2022 Gentoo
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisorymoderateRed Hat

Red Hat Software Collections RHSA-2022-1664-01 Moderate HTML Cleaner Threat

An update for rh-python38-python, rh-python38-python-lxml, and rh-python38-python-pip is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: Red Hat Software Collections security update Advisory ID: RHSA-2022:1664-01 Product: Red Hat Software Collections Advisory URL: https://access.redhat.com/errata/RHSA-2022:1664 Issue date: 2022-05-02 CVE Names: CVE-2021-43818 ==================================================================== 1. Summary: An update for rh-python38-python, rh-python38-python-lxml, and rh-python38-python-pip is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - noarch, ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - noarch, x86_64 3. Description: lxml is an XML processing library providing access to libxml2 and libxslt libraries using the Python ElementTree API. Security Fix(es): * python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, referto: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2032569 - CVE-2021-43818 python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through 2064443 - SCL Python 3.8: pip contains bundled pre-built exe files in site-packages/pip/_vendor/distlib/ [rhscl-3.8.z] 2068592 - Rebase the python3.8 interpreter to version 3.8.13 [rhscl-3.8.z] 6. Package List: Red Hat Software Collections for Red Hat Enterprise Linux Server (v.7): Source: rh-python38-python-3.8.13-1.el7.src.rpm rh-python38-python-lxml-4.4.1-8.el7.src.rpm rh-python38-python-pip-19.3.1-3.el7.src.rpm noarch: rh-python38-python-pip-19.3.1-3.el7.noarch.rpm rh-python38-python-pip-wheel-19.3.1-3.el7.noarch.rpm rh-python38-python-rpm-macros-3.8.13-1.el7.noarch.rpm rh-python38-python-srpm-macros-3.8.13-1.el7.noarch.rpm ppc64le: rh-python38-python-3.8.13-1.el7.ppc64le.rpm rh-python38-python-debug-3.8.13-1.el7.ppc64le.rpm rh-python38-python-debuginfo-3.8.13-1.el7.ppc64le.rpm rh-python38-python-devel-3.8.13-1.el7.ppc64le.rpm rh-python38-python-idle-3.8.13-1.el7.ppc64le.rpm rh-python38-python-libs-3.8.13-1.el7.ppc64le.rpm rh-python38-python-lxml-4.4.1-8.el7.ppc64le.rpm rh-python38-python-lxml-debuginfo-4.4.1-8.el7.ppc64le.rpm rh-python38-python-test-3.8.13-1.el7.ppc64le.rpm rh-python38-python-tkinter-3.8.13-1.el7.ppc64le.rpm s390x: rh-python38-python-3.8.13-1.el7.s390x.rpm rh-python38-python-debug-3.8.13-1.el7.s390x.rpm rh-python38-python-debuginfo-3.8.13-1.el7.s390x.rpm rh-python38-python-devel-3.8.13-1.el7.s390x.rpm rh-python38-python-idle-3.8.13-1.el7.s390x.rpm rh-python38-python-libs-3.8.13-1.el7.s390x.rpm rh-python38-python-lxml-4.4.1-8.el7.s390x.rpm rh-python38-python-lxml-debuginfo-4.4.1-8.el7.s390x.rpm rh-python38-python-test-3.8.13-1.el7.s390x.rpm rh-python38-python-tkinter-3.8.13-1.el7.s390x.rpm x86_64: rh-python38-python-3.8.13-1.el7.x86_64.rpm rh-python38-python-debug-3.8.13-1.el7.x86_64.rpm rh-python38-python-debuginfo-3.8.13-1.el7.x86_64.rpm rh-python38-python-devel-3.8.13-1.el7.x86_64.rpm rh-python38-python-idle-3.8.13-1.el7.x86_64.rpm rh-python38-python-libs-3.8.13-1.el7.x86_64.rpm rh-python38-python-lxml-4.4.1-8.el7.x86_64.rpm rh-python38-python-lxml-debuginfo-4.4.1-8.el7.x86_64.rpm rh-python38-python-test-3.8.13-1.el7.x86_64.rpm rh-python38-python-tkinter-3.8.13-1.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v.7): Source: rh-python38-python-3.8.13-1.el7.src.rpm rh-python38-python-lxml-4.4.1-8.el7.src.rpm rh-python38-python-pip-19.3.1-3.el7.src.rpm noarch: rh-python38-python-pip-19.3.1-3.el7.noarch.rpm rh-python38-python-pip-wheel-19.3.1-3.el7.noarch.rpm rh-python38-python-rpm-macros-3.8.13-1.el7.noarch.rpm rh-python38-python-srpm-macros-3.8.13-1.el7.noarch.rpm x86_64: rh-python38-python-3.8.13-1.el7.x86_64.rpm rh-python38-python-debug-3.8.13-1.el7.x86_64.rpm rh-python38-python-debuginfo-3.8.13-1.el7.x86_64.rpm rh-python38-python-devel-3.8.13-1.el7.x86_64.rpm rh-python38-python-idle-3.8.13-1.el7.x86_64.rpm rh-python38-python-libs-3.8.13-1.el7.x86_64.rpm rh-python38-python-lxml-4.4.1-8.el7.x86_64.rpm rh-python38-python-lxml-debuginfo-4.4.1-8.el7.x86_64.rpm rh-python38-python-test-3.8.13-1.el7.x86_64.rpm rh-python38-python-tkinter-3.8.13-1.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2021-43818 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYm+vntzjgjWX9erEAQi/gg/8CuTnUa8Ds0aFv3nwfjfiZcq3N8VWxTHB kdG/iamBiMPAjPMRPFB7HqetmzbmbzB3Qc/1QYbRvnkYGGUoDzdhxlwjhb9lkgwU rfWtpB4A4ryffT+V2va/8GDBnipLGmT9Myg0CcJmQ+gi75zB/+nGgAGCoxpJGCv7 QDLm+IIKVUpGmDQkny2BSWzA64iQJMz2Kb1gy/igOLHyn4RmJkrt8nqZbLoN1KF7 KnQG6GxMtfai3PmoHBQUA/CsD49V3Z2kYgT6xmq9l3xzYLkIeMSRvEqPdkwGOROP 9l+SV7VvD/lqKTgpfAyAw7BzG5T088ZgMB1MjIHDbU8I0uy2A5PvGjfdW1u35okT CZnpzTPWLeJqDO4rs4YdU8uJRJjm9gA20Ts9I0S1GIT/oJIW3FxElVr1ya2bQQNc OR1ytZvJBfR7QzjkzLIzLUEoyLgRd/gvja59+SYLM3RMxjfcY8OPZk6MbBXvdkwL kY3E2k/W4jCXMXI9bb7okNO/RmGrGQ3Zz526NlOsOJZwtJrqyFILPL1V/bDOFGDW lL1oQnROilEIZY07RpYDw6j042Tp3I0imv3TX6o192dYYJP1ybDNv9jPmcl77Eqt p2r8rtnA0NO8yUwEBUFkoOyI4MBmLmqy7tJCI2r51KvMgyTaaAo087kNnwIbvWG3 lanRNEaBolA=vlmi -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://listman.redhat.com/mailman/listinfo/rhsa-announce . Red Hat Software Collections offers revisions that address reasonable security concerns in Ruby modules to ensure system reliability.. Red Hat Software Collections, Python 3.8 Security, lxml Security Update. . LinuxSecurity.com Team

Calendar 2 May 02, 2022 Red Hat
Banner 3 1028x280 1708121785 1771599793
87
Ls Advisories Debian Esm H240
Price Tag 1security advisorysecurity updatedebian

Debian DSA-5043-1 Lxml Security Update: Cross-Site Scripting Fix

It was discovered that lxml, a Python binding for the libxml2 and libxslt libraries, does not properly sanitize its input, which could lead to cross-site scripting. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5043-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso January 12, 2022 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : lxml CVE ID : CVE-2021-43818 Debian Bug : 1001885 It was discovered that lxml, a Python binding for the libxml2 and libxslt libraries, does not properly sanitize its input, which could lead to cross-site scripting. For the oldstable distribution (buster), this problem has been fixed in version 4.3.2-1+deb10u4. For the stable distribution (bullseye), this problem has been fixed in version 4.6.3+dfsg-0.1+deb11u1. We recommend that you upgrade your lxml packages. For the detailed security status of lxml please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/lxml Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian Security Advisory DSA-5044-1 pertaining to Django vulnerability exposure resulting in potential remote code execution threats.. lxml security, debian update, python binding, libxml2 security, cross-site scripting. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jan 12, 2022 •Critical Debian
172
Ls Advisories Ubuntu Esm H240
Price Tag 1security advisorycode executionUbuntu

Ubuntu 21.10 USN-5225-1: Lxml Critical Arbitrary Code Execution

lxml could be made to execute arbitrary code if it received a specially crafted XML or HTML file.. =========================================================================Ubuntu Security Notice USN-5225-1 January 12, 2022 lxml vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 21.10 - Ubuntu 21.04 - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 ESM - Ubuntu 14.04 ESM Summary: lxml could be made to execute arbitrary code if it received a specially crafted XML or HTML file. Software Description: - lxml: pythonic binding for the libxml2 and libxslt libraries Details: It was discovered that lxml incorrectly handled certain XML and HTML files. An attacker could possibly use this issue to execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 21.10: python3-lxml 4.6.3+dfsg-0.1ubuntu0.2 Ubuntu 21.04: python3-lxml 4.6.3-1ubuntu0.2 Ubuntu 20.04 LTS: python-lxml 4.5.0-1ubuntu0.5 python3-lxml 4.5.0-1ubuntu0.5 Ubuntu 18.04 LTS: python-lxml 4.2.1-1ubuntu0.6 python3-lxml 4.2.1-1ubuntu0.6 Ubuntu 16.04 ESM: python-lxml 3.5.0-1ubuntu0.4+esm2 python3-lxml 3.5.0-1ubuntu0.4+esm2 Ubuntu 14.04 ESM: python-lxml 3.3.3-1ubuntu0.2+esm5 python3-lxml 3.3.3-1ubuntu0.2+esm5 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5225-1 CVE-2021-43818 Package Information: https://launchpad.net/ubuntu/+source/lxml/4.6.3+dfsg-0.1ubuntu0.2 https://launchpad.net/ubuntu/+source/lxml/4.6.3-1ubuntu0.2 https://launchpad.net/ubuntu/+source/lxml/4.5.0-1ubuntu0.5 https://launchpad.net/ubuntu/+source/lxml/4.2.1-1ubuntu0.6 . Revise thelxml library to address a major security vulnerability that could enable the execution of arbitrary code from specially designed files.. lxml Update, Ubuntu Security, Code Execution Risk. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jan 12, 2022 •Critical Ubuntu
Banner 3 1028x280 1708121785 1771599793
197
Ls Advisories Deblts Esm H240
Price Tag 1security advisorydebianpatch

Debian LTS: DLA-2871-1 Moderate: lxml HTML Cleaner Flaw

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. . - ----------------------------------------------------------------------- Debian LTS Advisory DLA-2871-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Utkarsh Gupta December 30, 2021 https://wiki.debian.org/LTS - ----------------------------------------------------------------------- Package : lxml Version : 3.7.1-1+deb9u5 CVE ID : CVE-2021-43818 Debian Bug : 1001885 lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. For Debian 9 stretch, this problem has been fixed in version 3.7.1-1+deb9u5. We recommend that you upgrade your lxml packages. For the detailed security status of lxml please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/lxml Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Revise lxml package within the Debian LTS framework to eliminate critical vulnerabilities related to HTML Cleaner and bolster overall security.. Debian LTS Security, lxml Update, Python Library Security. . LinuxSecurity.com Team

Calendar 2 Dec 30, 2021 Debian LTS
172
Ls Advisories Ubuntu Esm H240
Price Tag 1security advisorycriticalXSS

Ubuntu 14.04 ESM USN-4896-2 Critical: lxml XSS Attack Risk

lxml could allow cross-site scripting (XSS) attacks.. =========================================================================Ubuntu Security Notice USN-4896-2 April 08, 2021 lxml vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 ESM Summary: lxml could allow cross-site scripting (XSS) attacks. Software Description: - lxml: pythonic binding for the libxml2 and libxslt libraries Details: USN-4896-1 fixed a vulnerability in lxml. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that lxml incorrectly handled certain HTML attributes. A remote attacker could possibly use this issue to perform cross-site scripting (XSS) attacks. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 ESM: python-lxml 3.3.3-1ubuntu0.2+esm3 python3-lxml 3.3.3-1ubuntu0.2+esm3 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4896-2 https://ubuntu.com/security/notices/USN-4896-1 CVE-2021-28957 . Ubuntu Security Announcement USN-4896-2 draws attention to the cross-site scripting vulnerability found in lxml within Ubuntu 14.04 ESM.. lxml Vulnerability, Ubuntu Security Advisory, XSS Risk, Python Package Update. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Apr 08, 2021 •Critical Ubuntu
Banner 3 1028x280 1708121785 1771599793
172
Ls Advisories Ubuntu Esm H240
Price Tag 1security advisorysoftware patchcross-site scripting

Ubuntu 20.10: USN-4896-1 Moderate: lxml Cross-Site Scripting Risk

lxml could allow cross-site scripting (XSS) attacks.. =========================================================================Ubuntu Security Notice USN-4896-1 March 30, 2021 lxml vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.10 - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: lxml could allow cross-site scripting (XSS) attacks. Software Description: - lxml: pythonic binding for the libxml2 and libxslt libraries Details: It was discovered that lxml incorrectly handled certain HTML attributes. A remote attacker could possibly use this issue to perform cross-site scripting (XSS) attacks. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.10: python3-lxml 4.5.2-1ubuntu0.4 Ubuntu 20.04 LTS: python-lxml 4.5.0-1ubuntu0.3 python3-lxml 4.5.0-1ubuntu0.3 Ubuntu 18.04 LTS: python-lxml 4.2.1-1ubuntu0.4 python3-lxml 4.2.1-1ubuntu0.4 Ubuntu 16.04 LTS: python-lxml 3.5.0-1ubuntu0.4 python3-lxml 3.5.0-1ubuntu0.4 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4896-1 CVE-2021-28957 Package Information: https://launchpad.net/ubuntu/+source/lxml/4.5.2-1ubuntu0.4 https://launchpad.net/ubuntu/+source/lxml/4.5.0-1ubuntu0.3 https://launchpad.net/ubuntu/+source/lxml/4.2.1-1ubuntu0.4 https://launchpad.net/ubuntu/+source/lxml/3.5.0-1ubuntu0.4 . Explore the implications of lxml flaws in Ubuntu that may result in cross-site scripting threats and required upgrades.. lxml Exploits, Ubuntu XSS Attack, Security Patch Ubuntu, lxml Vulnerability Fix. . LinuxSecurity.com Team

Calendar 2 Mar 30, 2021 Ubuntu
87
Ls Advisories Debian Esm H240
Price Tag 1security advisoryupdatecritical

Debian: DSA-4880-1 Critical: lxml Input Sanitization Flaw

Kevin Chung discovered that lxml, a Python binding for the libxml2 and libxslt libraries, did not properly sanitize its input. This would allow a malicious user to mount a cross-site scripting attack. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-4880-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Sebastien Delafond March 29, 2021 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : lxml CVE ID : CVE-2021-28957 Debian Bug : 985643 Kevin Chung discovered that lxml, a Python binding for the libxml2 and libxslt libraries, did not properly sanitize its input. This would allow a malicious user to mount a cross-site scripting attack. For the stable distribution (buster), this problem has been fixed in version 4.3.2-1+deb10u3. We recommend that you upgrade your lxml packages. For the detailed security status of lxml please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/lxml Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Explore the contents of Debian Advisory DSA-4880-1, which outlines the security vulnerabilities discovered in lxml and the corresponding updates made to address these issues.. Debian Security,lxml Attack,Input Sanitization. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Mar 29, 2021 •Critical Debian
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here