Accepted lxml 4.3.2-1+deb10u1 (source amd64 all) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 26 Nov 2020 19:32:59 +0100
Source: lxml
Binary: python-lxml python-lxml-dbg python-lxml-doc python3-lxml python3-lxml-dbg
Architecture: source amd64 all
Version: 4.3.2-1+deb10u1
Distribution: buster-security
Urgency: medium
Maintainer: Matthias Klose <doko@debian.org>
Changed-By: Moritz Mühlenhoff <jmm@debian.org>
Description:
python-lxml - pythonic binding for the libxml2 and libxslt libraries
python-lxml-dbg - pythonic binding for the libxml2 and libxslt libraries (debug ext
python-lxml-doc - pythonic binding for the libxml2 and libxslt libraries (documenta
python3-lxml - pythonic binding for the libxml2 and libxslt libraries
python3-lxml-dbg - pythonic binding for the libxml2 and libxslt libraries (debug ext
Changes:
lxml (4.3.2-1+deb10u1) buster-security; urgency=medium
.
* CVE-2020-27783
* Backport a105ab8dc262ec6735977c25c13f0bdfcdec72a7 for similar issue
* Pass --with-cython to make sure the C parts get actually rebuilt
Checksums-Sha1:
6fa5e36dbd982c317f02d34683d08a1d08594960 2269 lxml_4.3.2-1+deb10u1.dsc
947323bf70f93da8ddb8611cbcb9ee98e42b5980 4380761 lxml_4.3.2.orig.tar.gz
20396d89e02c7a562d4e46c9d6e19b9f3e7de782 8976 lxml_4.3.2-1+deb10u1.debian.tar.xz
c933fc9505c3a3be2867c091d915f898e7c9837b 9364 lxml_4.3.2-1+deb10u1_amd64.buildinfo
09ccfd2f167573970d01dd8b571991316540c91d 5448588 python-lxml-dbg_4.3.2-1+deb10u1_amd64.deb
b28ab295c47d6bed75da9a18065bf91b6da3b9bb 1138072 python-lxml-doc_4.3.2-1+deb10u1_all.deb
a25aa4b7e9d212ca09869546d839fe1e3da06435 1143832 python-lxml_4.3.2-1+deb10u1_amd64.deb
491934eaded68e5433b14019e3692ae62f206f2b 9181156 python3-lxml-dbg_4.3.2-1+deb10u1_amd64.deb
f2990918fa6783ce1d9051a855ba886357a66240 1161064 python3-lxml_4.3.2-1+deb10u1_amd64.deb
Checksums-Sha256:
e875d205cba7363757ab82e435bd3a6d7feea3a81c29fa34daa68d583ec93a70 2269 lxml_4.3.2-1+deb10u1.dsc
3a9d8521c89bf6f2a929c3d12ad3ad7392c774c327ea809fd08a13be6b3bc05f 4380761 lxml_4.3.2.orig.tar.gz
f68846ec0e25896d3d84c4f1b1a7aded48d7c4d02b18b76e377e9c8480ac140e 8976 lxml_4.3.2-1+deb10u1.debian.tar.xz
dbd8c53211a3c78f3ccb230e7f2baeca440e195346fbd92039ed4efbab621ced 9364 lxml_4.3.2-1+deb10u1_amd64.buildinfo
125883118f8390402866eaec3b55b6faa6f7f17d7e50509180c341af514c9a0e 5448588 python-lxml-dbg_4.3.2-1+deb10u1_amd64.deb
392f1c4b1322afde80ad066042e8bdab40126d9d66583942d81635bf143525fc 1138072 python-lxml-doc_4.3.2-1+deb10u1_all.deb
ae1bcb160f18312322793a5e0a207640cf2eef641bdc47e72a30c77221f8e423 1143832 python-lxml_4.3.2-1+deb10u1_amd64.deb
c9cca35e95800f1d809ebde3e1511f7a8edd63158edbce7e2458b955084c6f07 9181156 python3-lxml-dbg_4.3.2-1+deb10u1_amd64.deb
5656ec25ccbdd8580b89c5a0a69e546ce00f48167d706e3091914e57ff1fcefa 1161064 python3-lxml_4.3.2-1+deb10u1_amd64.deb
Files:
fd671bb2ea45aeb1bb2d8d967c80a761 2269 python optional lxml_4.3.2-1+deb10u1.dsc
8d1698a48f4ef68484de5bab457cc787 4380761 python optional lxml_4.3.2.orig.tar.gz
686e966acf2862e024ae60e1f9844d9b 8976 python optional lxml_4.3.2-1+deb10u1.debian.tar.xz
e444caab5eab3f36a1c50c9079651467 9364 python optional lxml_4.3.2-1+deb10u1_amd64.buildinfo
d3ccbd15a7b6df7163c630b097caeaf9 5448588 debug optional python-lxml-dbg_4.3.2-1+deb10u1_amd64.deb
aaa692d8f5466658fe3af3f206c3b8d6 1138072 doc optional python-lxml-doc_4.3.2-1+deb10u1_all.deb
93a1d9a6018b35ed552eec52c6a69fb7 1143832 python optional python-lxml_4.3.2-1+deb10u1_amd64.deb
00effe53e2207801c9c8e6030ea524b6 9181156 debug optional python3-lxml-dbg_4.3.2-1+deb10u1_amd64.deb
119a02277d323174a78e1998e3b2c8b0 1161064 python optional python3-lxml_4.3.2-1+deb10u1_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAl/Tw1UACgkQEMKTtsN8
TjZ9pw//TX2jObiFxczkqY/N2f/5eolZLuKEbHt0jpwjvDps+8FHU0j9Fbm/Ll//
kEDPwwU+I7dONSRmKROGVB3opOWJtnCOUaG2XGNsBirgBPomVLMgYq+I/MZrhmEZ
PQQvpuwfO22cm1mxJnXsuW5iNl3J07GJhTEUfNWIy+OeQ8w/8tnZlZkTC10k6oH0
yOmq9z3Zt2JH/vodvfkgNpd4BFPfH7yWvjjmKiMpvBTYu9wxhfo1a//chN9qfQFU
4U/Lrlg9ObVQEYPZUWQePcsbCJM9Qa2PdUyfdPFWeOoAgW3cn57eOttBftVD40On
Z/WXM0xKzfBWHDk774nUD0TSm5/mXrVhRA1QY26zJBrTf5WrBb2ak4yOx/Pa2O/z
rz5FUdMfCzx6Tj1tkol44FmDfEWJWQIyhKTGlMRNutB3S/eTMPVfcSjxHbN+CNoy
UBTurOHXeXpGSmBjP7iISTI8Q+HY64ftuXsaZ3VBAyGNWSMP4d8joOoimgUnsSnA
xG5a+DLxo2KzM94OCvrw7DGmqAX1XOApM2E8Ud+BkgfyJb4u8hd3JZRRbnASyPOc
fHAlDWFmTlwN+qTnorYV3HQj9A2ZRggpOFwvc4ycd4Srppwtbr7GTSYwy/QM7lXy
fIN9KvIXVDprMRVO3aAX1oj3SiRdeIyNdC7xCwu+1kbVby4ryhw=
=zFXa
-----END PGP SIGNATURE-----