Linux
lxml security updates
Patch Radar has 17 security fixes for lxml, closing 6 CVEs. The newest is DEBIAN-CVE-2026-49825 (6.1.3-1), released September 14, 2026.
Latest version
n/a
Release date not known
Security fixes
17
On record in Patch Radar
CVEs
6
Closed by those fixes
Exploited
0
Vendor report or CISA KEV
Security fixes, newest first
| Priority | Fix | Release | Fixed in | CVEs | Exploited | Released |
|---|---|---|---|---|---|---|
| High | DEBIAN-CVE-2026-49825 | Debian 14 | 6.1.3-1 | 1 | Sep 14, 2026 | |
| High | DEBIAN-CVE-2026-49825 | Debian 12.15 (bookworm) | 4.9.2-1+deb12u1 | 1 | Sep 14, 2026 | |
| High | DEBIAN-CVE-2026-41066 | Debian 14 | 6.1.0-1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-41066 | Debian 12.15 (bookworm) | 4.9.2-1+deb12u1 | 1 | May 15, 2026 | |
| Routine | DEBIAN-CVE-2026-28350 | Debian 12.15 (bookworm) | 4.9.2-1+deb12u1 | 1 | Mar 5, 2026 | |
| Routine | DEBIAN-CVE-2026-28350 | Debian 13.5 (trixie) | 5.2.0-1 | 1 | Mar 5, 2026 | |
| Routine | DEBIAN-CVE-2026-28350 | Debian 14 | 5.2.0-1 | 1 | Mar 5, 2026 | |
| Routine | DEBIAN-CVE-2026-28348 | Debian 12.15 (bookworm) | 4.9.2-1+deb12u1 | 1 | Mar 5, 2026 | |
| Routine | DEBIAN-CVE-2026-28348 | Debian 13.5 (trixie) | 5.2.0-1 | 1 | Mar 5, 2026 | |
| Routine | DEBIAN-CVE-2026-28348 | Debian 14 | 5.2.0-1 | 1 | Mar 5, 2026 | |
| High | DEBIAN-CVE-2022-2309 | Debian 12.15 (bookworm) | 4.9.1-1 | 1 | Jul 5, 2022 | |
| High | DEBIAN-CVE-2022-2309 | Debian 13.5 (trixie) | 4.9.1-1 | 1 | Jul 5, 2022 | |
| High | DEBIAN-CVE-2022-2309 | Debian 14 | 4.9.1-1 | 1 | Jul 5, 2022 | |
| High | DSA-5043-1 | Debian 11.6 (bullseye) | 4.6.3+dfsg-0.1+deb11u1 | 1 | Jan 12, 2022 | |
| High | DEBIAN-CVE-2021-43818 | Debian 12.15 (bookworm) | 4.7.1-1 | 1 | Dec 13, 2021 | |
| High | DEBIAN-CVE-2021-43818 | Debian 13.5 (trixie) | 4.7.1-1 | 1 | Dec 13, 2021 | |
| High | DEBIAN-CVE-2021-43818 | Debian 14 | 4.7.1-1 | 1 | Dec 13, 2021 |