From cc65fda46f3d0a8b9424c88047a962c7bb9a37da8b7bbf50ae0532a016f54649 Mon Sep 17 00:00:00 2001 From: Dirk Mueller Date: Mon, 14 Apr 2025 20:23:51 +0000 Subject: [PATCH] =?UTF-8?q?-=20update=20to=205.3.2:=20=20=20*=20This=20rel?= =?UTF-8?q?ease=20resolves=20CVE-2025-24928=20as=20described=20in=20=20=20?= =?UTF-8?q?*=20https://gitlab.gnome.org/GNOME/libxml2/-/issues/847=20=20?= =?UTF-8?q?=20*=20GH#440:=20Some=20tests=20were=20adapted=20for=20libxml2?= =?UTF-8?q?=202.14.0.=20=20=20*=20LP#2097175:=20``DTD(external=5Fid=3D"?= =?UTF-8?q?=E2=80=A6")``=20erroneously=20required=20a=20=20=20=20=20byte?= =?UTF-8?q?=20string=20as=20ID=20value.=20=20=20*=20GH#450:=20``iterparse(?= =?UTF-8?q?)``=20internally=20triggered=20the=20=20=20=20=20`DeprecationWa?= =?UTF-8?q?rning``=20added=20in=20lxml=205.3.0=20when=20parsing=20HTML.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-lxml?expand=0&rev=204 --- lxml-5.3.0.tar.gz | 3 --- lxml-5.3.2.tar.gz | 3 +++ python-lxml.changes | 12 ++++++++++++ python-lxml.spec | 4 ++-- 4 files changed, 17 insertions(+), 5 deletions(-) delete mode 100644 lxml-5.3.0.tar.gz create mode 100644 lxml-5.3.2.tar.gz diff --git a/lxml-5.3.0.tar.gz b/lxml-5.3.0.tar.gz deleted file mode 100644 index 0c55dda..0000000 --- a/lxml-5.3.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:4e109ca30d1edec1ac60cdbe341905dc3b8f55b16855e03a54aaf59e51ec8c6f -size 3679318 diff --git a/lxml-5.3.2.tar.gz b/lxml-5.3.2.tar.gz new file mode 100644 index 0000000..23a70b5 --- /dev/null +++ b/lxml-5.3.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:773947d0ed809ddad824b7b14467e1a481b8976e87278ac4a730c2f7c7fcddc1 +size 3679948 diff --git a/python-lxml.changes b/python-lxml.changes index fa05f72..1194b6c 100644 --- a/python-lxml.changes +++ b/python-lxml.changes @@ -1,3 +1,15 @@ +------------------------------------------------------------------- +Mon Apr 14 20:23:23 UTC 2025 - Dirk Müller + +- update to 5.3.2: + * This release resolves CVE-2025-24928 as described in + * https://gitlab.gnome.org/GNOME/libxml2/-/issues/847 + * GH#440: Some tests were adapted for libxml2 2.14.0. + * LP#2097175: ``DTD(external_id="…")`` erroneously required a + byte string as ID value. + * GH#450: ``iterparse()`` internally triggered the + `DeprecationWarning`` added in lxml 5.3.0 when parsing HTML. + ------------------------------------------------------------------- Wed Sep 25 13:33:01 UTC 2024 - Adrian Schröter diff --git a/python-lxml.spec b/python-lxml.spec index 6301641..42847b4 100644 --- a/python-lxml.spec +++ b/python-lxml.spec @@ -1,7 +1,7 @@ # # spec file for package python-lxml # -# Copyright (c) 2024 SUSE LLC +# Copyright (c) 2025 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ %{?sle15_python_module_pythons} Name: python-lxml -Version: 5.3.0 +Version: 5.3.2 Release: 0 Summary: Pythonic XML processing library License: BSD-3-Clause AND GPL-2.0-or-later