Wind River Support Network

HomeDefectsLIN1019-7491
Fixed

LIN1019-7491 : Security Advisory - python-lxml - CVE-2021-43818

Created: Dec 13, 2021    Updated: Mar 28, 2022
Resolved Date: Dec 24, 2021
Found In Version: 10.19.45.1
Fix Version: 10.19.45.21
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Userspace

Description

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant context should upgrade to lxml 4.6.5 to receive a patch. There are no known workarounds available.

CREATE(Triage):(User=admin) CVE-2021-43818 (https://nvd.nist.gov/vuln/detail/CVE-2021-43818)

CVEs


Live chat
Online