Oracle Linux 9 python3.12-lxml Important HTML Issue ELSA-2026-66203

Back Linuxsecurity

Oracle Linux 9 python3.12-lxml Important HTML Issue ELSA-2026-66203

Linuxsecurity •LinuxSecurity Advisories • September 14, 2026

Share: View original

Artifactory Alert: Chained flaws let attackers gain admin control. Check your version now ×

[4.9.3-2.1] - Fix CVE-2026-49825: add xlink:href to known HTML link attributes Resolves: RHEL-251488

[4.9.3-2.1] - Fix CVE-2026-49825: add xlink:href to known HTML link attributes Resolves: RHEL-251488

python3.12-lxml-4.9.3-2.el9_8.1.x86_64.rpm

python3.12-lxml-4.9.3-2.el9_8.1.x86_64.rpm

python3.12-lxml-4.9.3-2.el9_8.1.aarch64.rpm

python3.12-lxml-4.9.3-2.el9_8.1.aarch64.rpm

Related CVEs: CVE-2026-49825

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Oracle Linux Security Updates Address Critical Vulnerabilities Oracle has released multiple security updates for its Linux distributions, addressing several critical vulnerabilities. Key updates include patches for CVE-2026-59090 and CVE-2026-18301 in GIMP, and multiple CVEs in FreeRDP, libssh, and Grafana. Affected systems include Oracle Linux 8, 9, and 10, with vulnerabilities allowing for potential remote code execution and privilege escalation. The updates also resolve issues related to file handling and email verification in Grafana. Administrators are urged to apply these patches promptly to mitigate risks. The updates were published on September 3, 2026, and are part of ongoing efforts to maintain system security. Specific CVEs include CVE-2026-55194, CVE-2026-67288, and CVE-2026-18300, among others. 65 sources 46

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

Platforms (2)

Linux Oracle Linux