RLSA-2022:8226

Import Source
https://storage.googleapis.com/resf-osv-data/RLSA-2022:8226.json
Related
Published
2022-11-15T06:18:49Z
Modified
2023-02-02T14:08:30.784925Z
Details

lxml is an XML processing library providing access to libxml2 and libxslt libraries using the Python ElementTree API.

Security Fix(es):

  • lxml: NULL Pointer Dereference in lxml (CVE-2022-2309)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.

References

Affected packages

Rocky Linux:9 / python-lxml

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0:4.6.5-3.el9