USN-5225-1

Source
https://ubuntu.com/security/notices/USN-5225-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/USN-5225-1.json
Related
Published
2022-01-12T12:46:34.386416Z
Modified
2022-01-12T12:46:34.386416Z
Summary
lxml vulnerability
Details

It was discovered that lxml incorrectly handled certain XML and HTML files. An attacker could possibly use this issue to execute arbitrary code.

References

Affected packages

Ubuntu:Pro:14.04:LTS / lxml

Package

Name
lxml

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
3.3.3-1ubuntu0.2+esm5

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "python-lxml-doc": "3.3.3-1ubuntu0.2+esm5",
            "python3-lxml": "3.3.3-1ubuntu0.2+esm5",
            "python-lxml": "3.3.3-1ubuntu0.2+esm5"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / lxml

Package

Name
lxml

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
3.5.0-1ubuntu0.4+esm2

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "python-lxml-doc": "3.5.0-1ubuntu0.4+esm2",
            "python3-lxml": "3.5.0-1ubuntu0.4+esm2",
            "python-lxml": "3.5.0-1ubuntu0.4+esm2"
        }
    ]
}

Ubuntu:18.04:LTS / lxml

Package

Name
lxml

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
4.2.1-1ubuntu0.6

Ecosystem specific 

{
    "availability": "No subscription needed",
    "binaries": [
        {
            "python-lxml-doc": "4.2.1-1ubuntu0.6",
            "python3-lxml": "4.2.1-1ubuntu0.6",
            "python-lxml": "4.2.1-1ubuntu0.6"
        }
    ]
}

Ubuntu:20.04:LTS / lxml

Package

Name
lxml

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
4.5.0-1ubuntu0.5

Ecosystem specific 

{
    "availability": "No subscription needed",
    "binaries": [
        {
            "python-lxml-doc": "4.5.0-1ubuntu0.5",
            "python3-lxml": "4.5.0-1ubuntu0.5",
            "python-lxml": "4.5.0-1ubuntu0.5"
        }
    ]
}