[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2021-28957/lxml

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
38d888b3 by Salvatore Bonaccorso at 2021-03-22T16:25:28+01:00
Add fixed version for CVE-2021-28957/lxml

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -29,7 +29,7 @@ CVE-2021-3451
 CVE-2021-3450
 	RESERVED
 CVE-2021-28957 (lxml 4.6.2 allows XSS. It places the HTML action attribute into defs.l ...)
-	- lxml <unfixed> (bug #985643)
+	- lxml 4.6.3-1 (bug #985643)
 	NOTE: https://bugs.launchpad.net/lxml/+bug/1888153
 	NOTE: https://github.com/lxml/lxml/pull/316
 	NOTE: https://github.com/lxml/lxml/commit/2d01a1ba8984e0483ce6619b972832377f208a0d



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/38d888b3806d62ce9c5287694a8a9dc202680903

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/38d888b3806d62ce9c5287694a8a9dc202680903
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210322/c967f967/attachment.htm>