FEDORA-EPEL-2021-0fec8057df — security update for python3-lxml

python3-lxml-4.2.5-4.el7

FEDORA-EPEL-2021-0fec8057df created by robert 7 months ago for Fedora EPEL 7

stable

Add patch to fix mXSS due to the use of improper parser (#1901633)
Add patch to fix missing input sanitization for formaction HTML5 attributes that may lead to XSS (#1941534)

This update has been submitted for testing by robert.

7 months ago

This update's test gating status has been changed to 'ignored'.

7 months ago

This update's test gating status has been changed to 'waiting'.

7 months ago

This update's test gating status has been changed to 'ignored'.

7 months ago

This update has been pushed to testing.

7 months ago

This update has been submitted for stable by bodhi.

6 months ago

This update has been pushed to stable.

6 months ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

Builds

python3-lxml-4.2.5-4.el7

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

7 months ago

in testing

7 months ago

in stable

6 months ago

BZ#1901633 CVE-2020-27783 python-lxml: mXSS due to the use of improper parser

BZ#1941534 CVE-2021-28957 python-lxml: missing input sanitization for formaction HTML5 attributes may lead to XSS

BZ#1941690 CVE-2021-28957 python3-lxml: python-lxml: missing input sanitization for formaction HTML5 attributes may lead to XSS [epel-all]

python3-lxml-4.2.5-4.el7

Automated Test Results