USN-4666-1 partially fixed a vulnerability in lxml, but an additional patch was needed. This update provides the corresponding additional patch in order to properly fix the vulnerability.
Original advisory details:
It was discovered that lxml incorrectly handled certain HTML. An attacker could possibly use this issue to cross-site scripting (XSS) attacks.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_version": "3.3.3-1ubuntu0.2+esm2", "binary_name": "python-lxml" }, { "binary_version": "3.3.3-1ubuntu0.2+esm2", "binary_name": "python-lxml-dbg" }, { "binary_version": "3.3.3-1ubuntu0.2+esm2", "binary_name": "python-lxml-dbgsym" }, { "binary_version": "3.3.3-1ubuntu0.2+esm2", "binary_name": "python-lxml-doc" }, { "binary_version": "3.3.3-1ubuntu0.2+esm2", "binary_name": "python3-lxml" }, { "binary_version": "3.3.3-1ubuntu0.2+esm2", "binary_name": "python3-lxml-dbg" }, { "binary_version": "3.3.3-1ubuntu0.2+esm2", "binary_name": "python3-lxml-dbgsym" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "3.5.0-1ubuntu0.3", "binary_name": "python-lxml" }, { "binary_version": "3.5.0-1ubuntu0.3", "binary_name": "python-lxml-dbg" }, { "binary_version": "3.5.0-1ubuntu0.3", "binary_name": "python-lxml-doc" }, { "binary_version": "3.5.0-1ubuntu0.3", "binary_name": "python3-lxml" }, { "binary_version": "3.5.0-1ubuntu0.3", "binary_name": "python3-lxml-dbg" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "4.2.1-1ubuntu0.3", "binary_name": "python-lxml" }, { "binary_version": "4.2.1-1ubuntu0.3", "binary_name": "python-lxml-dbg" }, { "binary_version": "4.2.1-1ubuntu0.3", "binary_name": "python-lxml-doc" }, { "binary_version": "4.2.1-1ubuntu0.3", "binary_name": "python3-lxml" }, { "binary_version": "4.2.1-1ubuntu0.3", "binary_name": "python3-lxml-dbg" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "4.5.0-1ubuntu0.2", "binary_name": "python-lxml" }, { "binary_version": "4.5.0-1ubuntu0.2", "binary_name": "python-lxml-dbg" }, { "binary_version": "4.5.0-1ubuntu0.2", "binary_name": "python-lxml-doc" }, { "binary_version": "4.5.0-1ubuntu0.2", "binary_name": "python3-lxml" }, { "binary_version": "4.5.0-1ubuntu0.2", "binary_name": "python3-lxml-dbg" } ] }