Security update for python-lxml
This update for python-lxml fixes the following issues: - CVE-2018-19787: Fixed XSS vulnerability via unescaped URL (bsc#1118088). - CVE-2021-28957: Fixed XSS vulnerability ia HTML5 attributes unescaped (bsc#1184177). - CVE-2021-43818: Fixed XSS vulnerability via script content in SVG images using data URIs (bnc#1193752). - CVE-2020-27783: Fixed mutation XSS with improper parser use (bnc#1179534).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for python-lxml fixes the following issues: - CVE-2018-19787: Fixed XSS vulnerability via unescaped URL (bsc#1118088). - CVE-2021-28957: Fixed XSS vulnerability ia HTML5 attributes unescaped (bsc#1184177). - CVE-2021-43818: Fixed XSS vulnerability via script content in SVG images using data URIs (bnc#1193752). - CVE-2020-27783: Fixed mutation XSS with improper parser use (bnc#1179534).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1118088
- https://bugzilla.suse.com/1179534
- https://bugzilla.suse.com/1184177
- https://bugzilla.suse.com/1193752
- https://lists.opensuse.org/archives/list/[email protected]/thread/CXPBEANDVGCE6ASRYRQYWM4CLYAJ6TAE/
- https://www.suse.com/security/cve/CVE-2018-19787
- https://www.suse.com/security/cve/CVE-2020-27783
- https://www.suse.com/security/cve/CVE-2021-28957
- https://www.suse.com/security/cve/CVE-2021-43818