Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2754-1

Опубликовано: 03 июл. 2026
Источник: suse-cvrf

Описание

Security update for python3-lxml

This update for python3-lxml fixes the following issue

  • CVE-2026-41066: information disclosure via untrusted XML input leading to local file read (bsc#1263254).

Список пакетов

Container suse/multi-linux-manager/5.1/x86_64/server:latest
python3-lxml-4.9.1-150500.3.7.1
SUSE Linux Enterprise Micro 5.5
python3-lxml-4.9.1-150500.3.7.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
python3-lxml-4.9.1-150500.3.7.1
python3-lxml-devel-4.9.1-150500.3.7.1

Ссылки

Описание

lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input to read local files. Setting the resolve_entities option explicitly to resolve_entities='internal' or resolve_entities=False disables the local file access. This vulnerability is fixed in 6.1.0.

Затронутые продукты
Container suse/multi-linux-manager/5.1/x86_64/server:latest:python3-lxml-4.9.1-150500.3.7.1
SUSE Linux Enterprise Micro 5.5:python3-lxml-4.9.1-150500.3.7.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:python3-lxml-4.9.1-150500.3.7.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:python3-lxml-devel-4.9.1-150500.3.7.1
Ссылки