Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2729-1

Опубликовано: 02 июл. 2026
Источник: suse-cvrf

Описание

Security update for python-lxml

This update for python-lxml fixes the following issue

  • CVE-2026-41066: information disclosure via untrusted XML input leading to local file read (bsc#1263254).

Список пакетов

SUSE Linux Enterprise Module for Python 3 15 SP7
python311-lxml-4.9.3-150400.8.11.1

Ссылки

Описание

lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input to read local files. Setting the resolve_entities option explicitly to resolve_entities='internal' or resolve_entities=False disables the local file access. This vulnerability is fixed in 6.1.0.

Затронутые продукты
SUSE Linux Enterprise Module for Python 3 15 SP7:python311-lxml-4.9.3-150400.8.11.1
Ссылки
Уязвимость SUSE-SU-2026:2729-1