Author: renodr
Date: Mon Oct 19 19:26:11 2020
New Revision: 1633
Log:
Errata: Add errata for lxml
Modified:
html/trunk/blfs/errata/10.0-systemd/index.html
html/trunk/blfs/errata/10.0/index.html
Modified: html/trunk/blfs/errata/10.0-systemd/index.html
==============================================================================
--- html/trunk/blfs/errata/10.0-systemd/index.html Sun Oct 18 10:41:38
2020 (r1632)
+++ html/trunk/blfs/errata/10.0-systemd/index.html Mon Oct 19 19:26:11
2020 (r1633)
@@ -142,6 +142,11 @@
This issue had to do with the 'redirect' option. To fix this issue,
update to stunnel-5.57 or later using the instructions in
<a
href="../../view/systemd/postlfs/stunnel.html">stunnel-5.57</a>.</li>
+ <li>After release, a security issue was discovered in lxml that allowed
+ it to process JavaScript code. This could potentially lead to
+ arbitrary code execution. To fix this vulnerability, update to
+ lxml-4.6.1 or later using the instructions in
+ <a
href="../../view/systemd/general/python-modules.html#lxml">lxml-4.6.1</a>.</li>
</ul>
<!--#include virtual="/common/footer.html" -->
Modified: html/trunk/blfs/errata/10.0/index.html
==============================================================================
--- html/trunk/blfs/errata/10.0/index.html Sun Oct 18 10:41:38 2020
(r1632)
+++ html/trunk/blfs/errata/10.0/index.html Mon Oct 19 19:26:11 2020
(r1633)
@@ -140,6 +140,11 @@
This issue had to do with the 'redirect' option. To fix this issue,
update to stunnel-5.57 or later using the instructions in
<a href="../../view/svn/postlfs/stunnel.html">stunnel-5.57</a>.</li>
+ <li>After release, a security issue was discovered in lxml that allowed
+ it to process JavaScript code. This could potentially lead to
+ arbitrary code execution. To fix this vulnerability, update to
+ lxml-4.6.1 or later using the instructions in
+ <a
href="../../view/svn/general/python-modules.html#lxml">lxml-4.6.1</a>.</li>
</ul>
<!--#include virtual="/common/footer.html" -->
--
http://lists.linuxfromscratch.org/listinfo/website
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
