Format: 1.8 Date: Tue, 04 Jan 2022 09:22:22 -0300 Source: lxml Binary: python3-lxml python3-lxml-dbg Built-For-Profiles: noudeb Architecture: s390x Version: 4.6.3-1ubuntu0.2 Distribution: hirsute Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Leonidas Da Silva Barbosa Description: python3-lxml - pythonic binding for the libxml2 and libxslt libraries python3-lxml-dbg - pythonic binding for the libxml2 and libxslt libraries (debug ext Changes: lxml (4.6.3-1ubuntu0.2) hirsute-security; urgency=medium . * SECURITY UPDATE: XSS vulnerability - debian/patches/CVE-2021-43818-*.patch: prevent "@import" from re-occurring in the CSS after replacements and remove SVG image data URLs since they can embed script content in src/lxml/html/clean.py, src/html/tests/test_clean.py. - CVE-2021-43818 Checksums-Sha1: e63ee0efa3a8edf4d7d7da8ab81ae460c724c27d 8742 lxml_4.6.3-1ubuntu0.2_s390x.buildinfo e832b1697754b28fcb48a6c3edc0e13a4199e87c 10215012 python3-lxml-dbg_4.6.3-1ubuntu0.2_s390x.deb 90eb775eadd37220a76b8eb0b8d6693c45b57872 918332 python3-lxml_4.6.3-1ubuntu0.2_s390x.deb Checksums-Sha256: 4b1abfa48047294233d47f9b55d8d5fa7b5c7e393740a882a9cfcbacc8c7e309 8742 lxml_4.6.3-1ubuntu0.2_s390x.buildinfo 2453071a7b947a4d7bb446c34f67158c26ca65876eabef0367fdc4510ddb1102 10215012 python3-lxml-dbg_4.6.3-1ubuntu0.2_s390x.deb 86bcf477b0ab636f84c92a7a0436a44daf641530b4a18c513e90a581cab119e0 918332 python3-lxml_4.6.3-1ubuntu0.2_s390x.deb Files: 05434cc7790b5b5217aa20da721842a3 8742 python optional lxml_4.6.3-1ubuntu0.2_s390x.buildinfo e9b7bf66e0a9dadcf992eaf3f784a580 10215012 debug optional python3-lxml-dbg_4.6.3-1ubuntu0.2_s390x.deb 37a87702b4b3a60d1bb2d0d6ee295268 918332 python optional python3-lxml_4.6.3-1ubuntu0.2_s390x.deb Original-Maintainer: Matthias Klose