Accepted lxml 3.7.1-1+deb9u1 (source amd64 all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 26 Nov 2020 18:38:23 +0530
Source: lxml
Binary: python-lxml python-lxml-dbg python3-lxml python3-lxml-dbg python-lxml-doc
Architecture: source amd64 all
Version: 3.7.1-1+deb9u1
Distribution: stretch-security
Urgency: medium
Maintainer: Matthias Klose <doko@debian.org>
Changed-By: Abhijith PA <abhijith@debian.org>
Description:
python-lxml - pythonic binding for the libxml2 and libxslt libraries
python-lxml-dbg - pythonic binding for the libxml2 and libxslt libraries (debug ext
python-lxml-doc - pythonic binding for the libxml2 and libxslt libraries (documenta
python3-lxml - pythonic binding for the libxml2 and libxslt libraries
python3-lxml-dbg - pythonic binding for the libxml2 and libxslt libraries (debug ext
Changes:
lxml (3.7.1-1+deb9u1) stretch-security; urgency=medium
.
* Non-maintainer upload by the Debian LTS Team.
* CVE-2018-19787: lxml/html/clean.py in the lxml.html.clean module
does not remove javascript: URLs that use escaping.
* CVE-2020-27783: Prevent combinations of <noscript> and <style> to
sneak JavaScript through the HTML cleaner.
Checksums-Sha1:
dd5f2aca7ed9b7562b5435a4fcec129ec831ffe2 2248 lxml_3.7.1-1+deb9u1.dsc
8ad2b82477bf59e05d1a8124211ececf986f7868 3788105 lxml_3.7.1.orig.tar.gz
8977c525a24fe9a77bf0c468ed0a1aadcf624f7e 9227 lxml_3.7.1-1+deb9u1.diff.gz
ddfb1b924a00059d7f753274fddb36cf176f1675 9423 lxml_3.7.1-1+deb9u1_amd64.buildinfo
1d065f7fc6ed18cd7a6060dd5a8ce5c32ba55e3e 3219248 python-lxml-dbg_3.7.1-1+deb9u1_amd64.deb
af0fab288318a1d67043033433516bdf61556e8a 1101068 python-lxml-doc_3.7.1-1+deb9u1_all.deb
8fa1ed740a724c862a55e1d8131a8bacefd5b85c 903302 python-lxml_3.7.1-1+deb9u1_amd64.deb
01e962e37843bc43d69c31ac08c042eff7e4afde 5144020 python3-lxml-dbg_3.7.1-1+deb9u1_amd64.deb
65ac58e786c8715b3230e080186c07aa2387eea6 900834 python3-lxml_3.7.1-1+deb9u1_amd64.deb
Checksums-Sha256:
703cb9adaf191bbc8f4a81140a916a7083bd5ff1128787660123435d5fd08e48 2248 lxml_3.7.1-1+deb9u1.dsc
1c7f6771838300787cfa1bb3ed6512e9dc78e60ecb308a8ed49ac956569c1cca 3788105 lxml_3.7.1.orig.tar.gz
d8b71c1564fdee1f68105358fdccf3d3fe186f10b1538ab92f23ee24c03e14af 9227 lxml_3.7.1-1+deb9u1.diff.gz
5247ae8ad767fc0c93550e7c731f1f12f1dc3645b3b5f47c280371fbe07c9595 9423 lxml_3.7.1-1+deb9u1_amd64.buildinfo
2609a0e7e8a591824b3b759387e669a6ff417ecc041e730c93570e5b7476f758 3219248 python-lxml-dbg_3.7.1-1+deb9u1_amd64.deb
fc00f139d3dc78641d4b0b2c37d0b26bf906c003e1f828dd837c9a4a07477788 1101068 python-lxml-doc_3.7.1-1+deb9u1_all.deb
a3f74d75f65b94f0e50b19a519d5825cc30ccd0168a8827cc17cbdca548e63fe 903302 python-lxml_3.7.1-1+deb9u1_amd64.deb
488a9bbf375ddc89e8d647a097387e9cc3e1602f96258bf3a6f3c2825265f9d2 5144020 python3-lxml-dbg_3.7.1-1+deb9u1_amd64.deb
8943a1c923b834a244797d89282b329e5290baa0727fd4e14b26de90c2609a16 900834 python3-lxml_3.7.1-1+deb9u1_amd64.deb
Files:
fa80cedb11d6f8d7c5a178089a0c9130 2248 python optional lxml_3.7.1-1+deb9u1.dsc
dde0e225b51de26dd47c60575bce8e16 3788105 python optional lxml_3.7.1.orig.tar.gz
6bc7d50ceb4444ea3e3b664eebe1e937 9227 python optional lxml_3.7.1-1+deb9u1.diff.gz
c591e06800fe4908df1155a7ef87af6a 9423 python optional lxml_3.7.1-1+deb9u1_amd64.buildinfo
5ffe3b3e3099040d86bd198d9bc9d797 3219248 debug extra python-lxml-dbg_3.7.1-1+deb9u1_amd64.deb
71ee37b86bbc2323c51b42d4abfbb6b0 1101068 doc extra python-lxml-doc_3.7.1-1+deb9u1_all.deb
60e75c8739545d3ab394da107841b77d 903302 python optional python-lxml_3.7.1-1+deb9u1_amd64.deb
2e35c5b19fded13c638763adaeff3286 5144020 debug extra python3-lxml-dbg_3.7.1-1+deb9u1_amd64.deb
154d4cc465e1930ba2bebe393a21d803 900834 python optional python3-lxml_3.7.1-1+deb9u1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=8KKp
-----END PGP SIGNATURE-----
Reply to: