lxml 3.5.0-1ubuntu0.2 source package in Ubuntu

Changelog

lxml (3.5.0-1ubuntu0.2) xenial-security; urgency=medium

  * SECURITY UPDATE: XSS vulnerability
    - Prevent combinations of <noscript> and <style> to sneak
      JS through the HTML cleaner in src/lxml/html/clean.py,
      src/lxml/html/tests/test_clean.py.
    - CVE-2020-27783

 -- Leonidas Da Silva Barbosa <email address hidden>  Tue, 08 Dec 2020 13:51:53 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa on 2020-12-08
Uploaded to:
Xenial
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
lxml_3.5.0.orig.tar.gz 3.6 MiB 349f93e3a4b09cc59418854ab8013d027d246757c51744bf20069bc89016f578
lxml_3.5.0-1ubuntu0.2.diff.gz 8.3 KiB 48793b9d46d1e75a1e8ab835e34cac184427a49886c3be12dc668b43d3053dfa
lxml_3.5.0-1ubuntu0.2.dsc 2.3 KiB d73b80a7e31c309b3a9a4113d4b74f8e9664c2d2fc99d036d4ddd948ee87c760

View changes file

Binary packages built by this source

python-lxml: pythonic binding for the libxml2 and libxslt libraries

 lxml is a new Python binding for libxml2 and libxslt, completely
 independent from existing Python bindings. Its aim:
 .
   * Pythonic API.
   * Documented.
   * Use Python unicode strings in API.
   * Safe (no segfaults).
   * No manual memory management!
 .
 lxml aims to provide a Pythonic API by following as much as possible
 the ElementTree API, trying to avoid inventing too many new APIs,
 or the user's having to learn new things -- XML is complicated enough.

python-lxml-dbg: pythonic binding for the libxml2 and libxslt libraries (debug extension)

 lxml is a new Python binding for libxml2 and libxslt, completely
 independent from existing Python bindings.
 .
 This package contains the extension built for the Python debug interpreter.

python-lxml-doc: pythonic binding for the libxml2 and libxslt libraries (documentation)

 lxml is a new Python binding for libxml2 and libxslt, completely
 independent from these existing Python bindings.
 .
 This package contains the html documentation.

python3-lxml: pythonic binding for the libxml2 and libxslt libraries

 lxml is a new Python binding for libxml2 and libxslt, completely
 independent from existing Python bindings. Its aim:
 .
   * Pythonic API.
   * Documented.
   * Use Python unicode strings in API.
   * Safe (no segfaults).
   * No manual memory management!
 .
 lxml aims to provide a Pythonic API by following as much as possible
 the ElementTree API, trying to avoid inventing too many new APIs,
 or the user's having to learn new things -- XML is complicated enough.

python3-lxml-dbg: pythonic binding for the libxml2 and libxslt libraries (debug extension)

 lxml is a new Python binding for libxml2 and libxslt, completely
 independent from existing Python bindings.
 .
 This package contains the extension built for the Python3 debug interpreter.