Format: 1.8 Date: Mon, 29 Mar 2021 12:04:02 -0400 Source: lxml Binary: python-lxml python-lxml-dbg python3-lxml python3-lxml-dbg Architecture: i386 Version: 4.5.0-1ubuntu0.3 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: python-lxml - pythonic binding for the libxml2 and libxslt libraries python-lxml-dbg - pythonic binding for the libxml2 and libxslt libraries (debug ext python3-lxml - pythonic binding for the libxml2 and libxslt libraries python3-lxml-dbg - pythonic binding for the libxml2 and libxslt libraries (debug ext Changes: lxml (4.5.0-1ubuntu0.3) focal-security; urgency=medium . * SECURITY UPDATE: incorrect formaction attribute input sanitization - debian/patches/CVE-2021-28957.patch: add HTML-5 formaction attribute to defs.link_attrs in src/lxml/html/defs.py, src/lxml/html/tests/test_clean.py. - CVE-2021-28957 Checksums-Sha1: 618dc7d3a7c0689819a6241762c3a7820b1495f2 8765 lxml_4.5.0-1ubuntu0.3_i386.buildinfo 9de9c3cac164df7e84cf6dd16875831fcefb9d02 2482392 python-lxml-dbg_4.5.0-1ubuntu0.3_i386.deb db7f2d01751c80b2a121d88aca16a627be3632f3 725384 python-lxml_4.5.0-1ubuntu0.3_i386.deb a425ccb9aac8a0f9620fbd76f768d7605a7e075c 11068552 python3-lxml-dbg_4.5.0-1ubuntu0.3_i386.deb f6152a6a7cdf4430d48e5cc9e656250e69ff5fc3 1268168 python3-lxml_4.5.0-1ubuntu0.3_i386.deb Checksums-Sha256: 07cc8c82acaf0e363d915e7ebd3efb5c93ae6afa64f195864c4f5af9f679a9c7 8765 lxml_4.5.0-1ubuntu0.3_i386.buildinfo e8712bfc1a08f7a57e465199e330427c7c859eb39a1692d52ec12ed4c2d4f705 2482392 python-lxml-dbg_4.5.0-1ubuntu0.3_i386.deb 4db5e9162701b1efab381d2ec6272595247b128d9771dc879ec549d886148a6d 725384 python-lxml_4.5.0-1ubuntu0.3_i386.deb be826f7a7e3b60847e23b982b7577525a1bbbf5735c616234b731524644c2220 11068552 python3-lxml-dbg_4.5.0-1ubuntu0.3_i386.deb de17d84f166e55b8c6ed419398fcb69845583b1ff19ca66e9522eb043f5a3b5c 1268168 python3-lxml_4.5.0-1ubuntu0.3_i386.deb Files: 6b10949b60788f758751514f4e71e384 8765 python optional lxml_4.5.0-1ubuntu0.3_i386.buildinfo e87a5ea4385131b5851d7cb5e6b9a778 2482392 debug optional python-lxml-dbg_4.5.0-1ubuntu0.3_i386.deb da8355bc03b8adf23307313c33cc6bc1 725384 python optional python-lxml_4.5.0-1ubuntu0.3_i386.deb 87a5597a6eede2680b82ed41868c96cd 11068552 debug optional python3-lxml-dbg_4.5.0-1ubuntu0.3_i386.deb cd7ae2fa5aa5bb5532bb9416505aa92f 1268168 python optional python3-lxml_4.5.0-1ubuntu0.3_i386.deb Original-Maintainer: Matthias Klose