[CLSA-2026:1793371424] Fix CVE(s): CVE-2026-49825
Type:
security
Severity:
Important
Release date:
2026-10-30 14:43:55 UTC
Description:
* SECURITY UPDATE: HTML Cleaner does not sanitize xlink:href links in embedded SVG/MathML - debian/patches/CVE-2026-49825.patch: HTML Cleaner does not sanitize xlink:href links in embedded SVG/MathML - CVE-2026-49825
CVEs fixed:
Updated packages:
  • python-lxml-doc_4.6.3+dfsg-0.1+deb11u1+tuxcare.els1_all.deb
    sha:667bed39eebee51779b03348990d1a781203820f
  • python3-lxml_4.6.3+dfsg-0.1+deb11u1+tuxcare.els1_amd64.deb
    sha:244d411e0711c66dd912cb709fbe1fe556434b52
  • python3-lxml_4.6.3+dfsg-0.1+deb11u1+tuxcare.els1_arm64.deb
    sha:af3609f6e87323268fde7a524bdea8fe16c3b196
  • python3-lxml_4.6.3+dfsg-0.1+deb11u1+tuxcare.els1_armel.deb
    sha:377b7c1790bad3848a6de05a429c033e11382685
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.