Ubuntu
lxml package

lxml 4.5.2-1ubuntu0.3 source package in Ubuntu

Changelog

lxml (4.5.2-1ubuntu0.3) groovy-security; urgency=medium

  * SECURITY UPDATE: XSS vulnerability
    - debian/patches/CVE-2020-27783-part2*.patch:
      This adds the missing part reported from upstream
      Prevent combinations of <noscript> and <style> to sneak
      JS through the HTML cleaner in src/lxml/html/clean.py,
      src/lxml/html/tests/test_clean.py.
    - CVE-2020-27783
  * Adding --with-cython to debian/rules in order to it build compile the .py
    files changed and regenerate the .c files to the binaries.

 -- Leonidas Da Silva Barbosa <email address hidden>  Thu, 10 Dec 2020 12:55:54 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa on 2020-12-10
Uploaded to:
Groovy
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Groovy updates on 2020-12-11 main python
Groovy security on 2020-12-11 main python

Downloads

File Size SHA-256 Checksum
lxml_4.5.2.orig.tar.gz 4.3 MiB cdc13a1682b2a6241080745b1953719e7fe0850b40a5c71ca574f090a1391df6
lxml_4.5.2-1ubuntu0.3.debian.tar.xz 9.6 KiB 16505474dade2353121e979dcde1a1573485b4a5f0d3bb43b00d501100267c3c
lxml_4.5.2-1ubuntu0.3.dsc 2.0 KiB e7d10f16d4f3a0a885ae7f6096a8567da6b2526587310a86ff47e600d66dc00e

View changes file

Binary packages built by this source

python-lxml-doc: pythonic binding for the libxml2 and libxslt libraries (documentation)

 lxml is a new Python binding for libxml2 and libxslt, completely
 independent from these existing Python bindings.
 .
 This package contains the html documentation.

python3-lxml: pythonic binding for the libxml2 and libxslt libraries

 lxml is a new Python binding for libxml2 and libxslt, completely
 independent from existing Python bindings. Its aim:
 .
   * Pythonic API.
   * Documented.
   * Use Python unicode strings in API.
   * Safe (no segfaults).
   * No manual memory management!
 .
 lxml aims to provide a Pythonic API by following as much as possible
 the ElementTree API, trying to avoid inventing too many new APIs,
 or the user's having to learn new things -- XML is complicated enough.

python3-lxml-dbg: pythonic binding for the libxml2 and libxslt libraries (debug extension)

 lxml is a new Python binding for libxml2 and libxslt, completely
 independent from existing Python bindings.
 .
 This package contains the extension built for the Python3 debug interpreter.