USN-5225-1: lxml vulnerability
12 January 2022
lxml could be made to execute arbitrary code if it received a specially crafted XML or HTML file.
- lxml - pythonic binding for the libxml2 and libxslt libraries
It was discovered that lxml incorrectly handled certain XML and HTML files.
An attacker could possibly use this issue to execute arbitrary code.
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.