[SECURITY] Fedora 36 Update: python-lxml-4.7.1-3.fc36
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-ed0eeb6a20
2022-09-18 01:12:54.514591
--------------------------------------------------------------------------------
Name : python-lxml
Product : Fedora 36
Version : 4.7.1
Release : 3.fc36
URL : https://github.com/lxml/lxml
Summary : XML processing library combining libxml2/libxslt with the ElementTree API
Description :
lxml is a Pythonic, mature binding for the libxml2 and libxslt libraries. It
provides safe and convenient access to these libraries using the ElementTree It
extends the ElementTree API significantly to offer support for XPath, RelaxNG,
XML Schema, XSLT, C14N and much more.To contact the project, go to the project
home page < or see our bug tracker at case you want to use the current ...
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2022-2309
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 15 2022 Charalampos Stratakis <cstratak(a)redhat.com> - 4.7.1-3
- Security fix for CVE-2022-2309
- Resolves: rhbz#2107571
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2108457 - CVE-2022-2309 python-lxml: lxml: NULL Pointer Dereference in lxml
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2108457
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-ed0eeb6a20' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------