Ubuntu
lxml package

lxml 4.6.3+dfsg-0.1ubuntu0.2 source package in Ubuntu

Changelog

lxml (4.6.3+dfsg-0.1ubuntu0.2) impish-security; urgency=medium

  * SECURITY UPDATE: XSS vulnerability
    - debian/patches/CVE-2021-43818-*.patch: prevent "@import"
      from re-occurring in the CSS after replacements and remove
      SVG image data URLs since they can embed script content in
      src/lxml/html/clean.py, src/html/tests/test_clean.py.
    - CVE-2021-43818

 -- Leonidas Da Silva Barbosa <email address hidden>  Tue, 04 Jan 2022 09:53:09 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Uploaded to:
Impish
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
lxml_4.6.3+dfsg.orig.tar.gz 918.2 KiB aa386ddf45ccc40975f33d29e285b6656273254ed797dd87d6283090f5d62036
lxml_4.6.3+dfsg-0.1ubuntu0.2.debian.tar.xz 9.5 KiB 96292da588d70ae5c88d41da42b10df96fd55e289d77a53997e2846930486439
lxml_4.6.3+dfsg-0.1ubuntu0.2.dsc 2.1 KiB 2e7e7d11eb7e988fdc1e3a5de22b38b1f3743a2bc4c8f4254272dbbbf959d03c

View changes file

Binary packages built by this source

python-lxml-doc: No summary available for python-lxml-doc in ubuntu impish.

No description available for python-lxml-doc in ubuntu impish.

python3-lxml: No summary available for python3-lxml in ubuntu impish.

No description available for python3-lxml in ubuntu impish.

python3-lxml-dbg: No summary available for python3-lxml-dbg in ubuntu impish.

No description available for python3-lxml-dbg in ubuntu impish.