Accepting request 1280666 from devel:languages:python

OBS-URL: https://build.opensuse.org/request/show/1280666
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-lxml?expand=0&rev=113

lxml-5.2.2.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:bb2dc4898180bea79863d5487e5f9c7c34297414bad54bcd0f0852aee9cfdb87
-size 3678631

python-lxml.changes

@@ -1,3 +1,40 @@
+-------------------------------------------------------------------
+Tue May 27 14:56:16 UTC 2025 - Nico Krapp <nico.krapp@suse.com>
+
+- Update to 5.4.0
+  * LP#2107279: Binary wheels use libxml2 2.13.8 and libxslt 1.1.43 to resolve
+    several CVEs. Issue found by Anatoly Katyushin, see
+    https://bugs.launchpad.net/lxml/+bug/2107279
+
+-------------------------------------------------------------------
+Mon Apr 14 20:23:23 UTC 2025 - Dirk Müller <dmueller@suse.com>
+
+- update to 5.3.2 (bsc#1237370, CVE-2025-24928):
+  * This release resolves CVE-2025-24928 as described in
+  * https://gitlab.gnome.org/GNOME/libxml2/-/issues/847
+  * GH#440: Some tests were adapted for libxml2 2.14.0.
+  * LP#2097175: ``DTD(external_id="…")`` erroneously required a
+    byte string as ID value.
+  * GH#450: ``iterparse()`` internally triggered the
+    `DeprecationWarning`` added in lxml 5.3.0 when parsing HTML.
+
+-------------------------------------------------------------------
+Wed Sep 25 13:33:01 UTC 2024 - Adrian Schröter <adrian@suse.de>
+
+- 5.3.0 (2024-08-10)
+  Features added
+  - GH#421: Nested CDATA sections are no longer rejected but split
+    on output to represent ]]> correctly. Patch by Gertjan Klein.
+  Bugs fixed
+  - LP#2060160: Attribute values serialised differently in
+    xmlfile.element() and xmlfile.write().
+  - LP#2058177: The ISO-Schematron implementation could fail on
+    unknown prefixes. Patch by David Lakin.
+  Other changes
+  - LP#2067707: The strip_cdata option in HTMLParser() turned out
+    to be useless and is now deprecated.
+  - Built with Cython 3.0.11.
+
 -------------------------------------------------------------------
 Fri Jun 14 07:10:32 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>
 

python-lxml.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package python-lxml
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
 
 %{?sle15_python_module_pythons}
 Name:           python-lxml
-Version:        5.2.2
+Version:        5.4.0
 Release:        0
 Summary:        Pythonic XML processing library
 License:        BSD-3-Clause AND GPL-2.0-or-later