Accepted lxml 3.4.0-1+deb8u1 (source all amd64) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 10 Dec 2018 09:39:10 +0100
Source: lxml
Binary: python-lxml python-lxml-dbg python3-lxml python3-lxml-dbg python-lxml-doc
Architecture: source all amd64
Version: 3.4.0-1+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Matthias Klose <doko@debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
python-lxml - pythonic binding for the libxml2 and libxslt libraries
python-lxml-dbg - pythonic binding for the libxml2 and libxslt libraries (debug ext
python-lxml-doc - pythonic binding for the libxml2 and libxslt libraries (documenta
python3-lxml - pythonic binding for the libxml2 and libxslt libraries
python3-lxml-dbg - pythonic binding for the libxml2 and libxslt libraries (debug ext
Changes:
lxml (3.4.0-1+deb8u1) jessie-security; urgency=high
.
* CVE-2018-19787: Prevent an XSS injection vulnerability where LXML did not
remove "javascript:" URLs that used escaping.
Checksums-Sha1:
b0d9d48eeae287108e876b4e96e06e15ae187694 2148 lxml_3.4.0-1+deb8u1.dsc
df4ee0805fa85e3d019610ef1b9d31a024085fe1 3522134 lxml_3.4.0.orig.tar.gz
ffbf498d9d9259071bb71fbd3a2aa4bdc84f170c 7927 lxml_3.4.0-1+deb8u1.diff.gz
9e5a43858137239fad912443d8718a54e0702fe7 1027546 python-lxml-doc_3.4.0-1+deb8u1_all.deb
9c53e9b9ab51850f101c2474e4721ee0a2b28523 755796 python-lxml_3.4.0-1+deb8u1_amd64.deb
3929bc00bd1d3deb24a0d390741b9452143d1c08 2568216 python-lxml-dbg_3.4.0-1+deb8u1_amd64.deb
e9305b3f3b484c7b1271c92d058553e87d7a2e4b 744140 python3-lxml_3.4.0-1+deb8u1_amd64.deb
463aa4578b58058ab6fde3415feeff4966da7793 3031264 python3-lxml-dbg_3.4.0-1+deb8u1_amd64.deb
Checksums-Sha256:
84c10c542a5fdd0aa98d159753de43e08998b1fca4c2c5c7ca5a5562150c7d79 2148 lxml_3.4.0-1+deb8u1.dsc
714a68bf567fdec2bb7959560dc8376c0bfc688cfceb135f43b9bd87af7a956a 3522134 lxml_3.4.0.orig.tar.gz
3a3e511b17a0b3811a2564dddfb4796d1505c408705090cbfe316ae7f6e27b63 7927 lxml_3.4.0-1+deb8u1.diff.gz
6c5856c7bccc279629f975a3f446abbb50e6a97315bc46dae6c267218a8d1d2d 1027546 python-lxml-doc_3.4.0-1+deb8u1_all.deb
096d1cff718c3da1f48a7b883a0feb095bb2c6fdcbb41ae280a602c03bee9345 755796 python-lxml_3.4.0-1+deb8u1_amd64.deb
ad826e293f420fb57c2f02d4baac602ad84c5ebc74d2177ed3f30b162631385d 2568216 python-lxml-dbg_3.4.0-1+deb8u1_amd64.deb
2fda0420646ad4ee95f56525b9bda8b8ba6a1c6cbda6b558565594c3ece8ad1a 744140 python3-lxml_3.4.0-1+deb8u1_amd64.deb
d928a81991a9aa8d81714a9faabd0b8d314c4db3c4c1160ad7e6c1074567124b 3031264 python3-lxml-dbg_3.4.0-1+deb8u1_amd64.deb
Files:
14106fce7cef4b4ce16f0e92953213e3 2148 python optional lxml_3.4.0-1+deb8u1.dsc
bc90cc4e4ee04e1f8290ae0f70e34eea 3522134 python optional lxml_3.4.0.orig.tar.gz
90e62e00976a02b518c0a0d66de6d00c 7927 python optional lxml_3.4.0-1+deb8u1.diff.gz
9dc06eb28e221d4439f9e983cae15f80 1027546 doc extra python-lxml-doc_3.4.0-1+deb8u1_all.deb
aa66bb5482764bd72df154fbbe079b85 755796 python optional python-lxml_3.4.0-1+deb8u1_amd64.deb
62a682e211401ac8506a6c7039106844 2568216 debug extra python-lxml-dbg_3.4.0-1+deb8u1_amd64.deb
6be284ee8aa7535a23b08cc94d9ec98e 744140 python optional python3-lxml_3.4.0-1+deb8u1_amd64.deb
a367f88aed790bf445081e7e87a24761 3031264 debug extra python3-lxml-dbg_3.4.0-1+deb8u1_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlwOKB8ACgkQHpU+J9Qx
Hlil2w//fXFA69JX1CgkKAQz/CIwPa8eMWqFcgM+VU+bA0d3asJZGVI4NV8wag3j
zwZdnP83U3MmsGzwf6F7GQLiHWsmPHByR05Wq7o3Y4DD9l23Vh1FpcUTqXx9WXOV
VKdiJ0FJHxkpuX3oRs3uQpzRcLUwIWnHYhdxMHrO/T5JBA644+cPgktDNADkjhrJ
UaOpo0A142vHsZ1Guy4uXWSUDvVPxR6MhydAqmVSeiDcxqIFP9J5j3koMIUXHOJq
XK5E4bdjFYrKSov2goTQ/qfkg9sxcm9CFC27TSNcEweJXuCQx/YJ3n8pRIihco3O
BNbFHPRaGYwEUXgSZA+xOJMWuN1oGBje2Xo6hyGryIAIlbv9yWgfBewOKZVc2ynw
uixUc4EHz1t5zb0ASH6HHanaRKlZhxnLu7U7ODMtyLwqQzhtngiMIOUw1BL1jl5f
diCds9LXEpuiezlFjqW4c3Bfg5LwxZQoq6KooNhi8THbo5WVJRIyezdENvVz8OG/
8/nb/UEKHkLujjmQo4ErV556wpgjUZbYql5AeL6kbLDAHlSmlAT1d/biRp1kOVHs
/bwW5pztKrc4JgLBXgdsIf0TcJJGVfespMJLISo8RD+vE43rL7ct4w85qbrIeGh5
Ke7M4c8mBZoWBT3YIuD3SMNAxzlXFfvVmhyf1Oqo/k9ZCjA4UIM=
=qOru
-----END PGP SIGNATURE-----