Sync from SUSE:SLFO:Main python-lxml revision 79de8f819da44edfabf60185801f64c5

python-lxml.changes

@@ -1,3 +1,23 @@
+-------------------------------------------------------------------
+Tue May 27 14:56:16 UTC 2025 - Nico Krapp <nico.krapp@suse.com>
+
+- Update to 5.4.0
+  * LP#2107279: Binary wheels use libxml2 2.13.8 and libxslt 1.1.43 to resolve
+    several CVEs. Issue found by Anatoly Katyushin, see
+    https://bugs.launchpad.net/lxml/+bug/2107279
+
+-------------------------------------------------------------------
+Mon Apr 14 20:23:23 UTC 2025 - Dirk Müller <dmueller@suse.com>
+
+- update to 5.3.2 (bsc#1237370, CVE-2025-24928):
+  * This release resolves CVE-2025-24928 as described in
+  * https://gitlab.gnome.org/GNOME/libxml2/-/issues/847
+  * GH#440: Some tests were adapted for libxml2 2.14.0.
+  * LP#2097175: ``DTD(external_id="…")`` erroneously required a
+    byte string as ID value.
+  * GH#450: ``iterparse()`` internally triggered the
+    `DeprecationWarning`` added in lxml 5.3.0 when parsing HTML.
+
 -------------------------------------------------------------------
 Wed Sep 25 13:33:01 UTC 2024 - Adrian Schröter <adrian@suse.de>
 

python-lxml.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package python-lxml
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
 
 %{?sle15_python_module_pythons}
 Name:           python-lxml
-Version:        5.3.0
+Version:        5.4.0
 Release:        0
 Summary:        Pythonic XML processing library
 License:        BSD-3-Clause AND GPL-2.0-or-later