FEDORA-EPEL-2021-0fec8057df — security update for python3-lxml

stable

python3-lxml-4.2.5-4.el7

FEDORA-EPEL-2021-0fec8057df created by robert 4 years ago for Fedora EPEL 7

Add patch to fix mXSS due to the use of improper parser (#1901633)
Add patch to fix missing input sanitization for formaction HTML5 attributes that may lead to XSS (#1941534)

This update has been submitted for testing by robert.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update has been pushed to testing.

4 years ago

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

Builds

python3-lxml-4.2.5-4.el7

BZ#1901633 CVE-2020-27783 python-lxml: mXSS due to the use of improper parser

BZ#1941534 CVE-2021-28957 python-lxml: missing input sanitization for formaction HTML5 attributes may lead to XSS

BZ#1941690 CVE-2021-28957 python3-lxml: python-lxml: missing input sanitization for formaction HTML5 attributes may lead to XSS [epel-all]

python3-lxml-4.2.5-4.el7

Automated Test Results

ignored