-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 15 Dec 2020 13:23:34 -0500 Source: lxml Binary: python-lxml python-lxml-dbg python3-lxml python3-lxml-dbg python-lxml-doc Architecture: source Version: 3.7.1-1+deb9u2 Distribution: stretch-security Urgency: high Maintainer: Matthias Klose <doko@debian.org> Changed-By: Roberto C. Sánchez <roberto@debian.org> Description: python-lxml - pythonic binding for the libxml2 and libxslt libraries python-lxml-dbg - pythonic binding for the libxml2 and libxslt libraries (debug ext python-lxml-doc - pythonic binding for the libxml2 and libxslt libraries (documenta python3-lxml - pythonic binding for the libxml2 and libxslt libraries python3-lxml-dbg - pythonic binding for the libxml2 and libxslt libraries (debug ext Changes: lxml (3.7.1-1+deb9u2) stretch-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2020-27783: Backport additional upstream commit a105ab8dc262ec6735977c25c13f0bdfcdec72a7 to address math/svg part of the vulnerability and complete the fix Checksums-Sha1: c087e2eb2e83cfcca245b888c828f8a4290f3a62 2222 lxml_3.7.1-1+deb9u2.dsc 3e351b6f6d07d415c95a33668d4163e3dab189c9 10226 lxml_3.7.1-1+deb9u2.diff.gz a2cde107c4239b114fea90bf5cdace71bd8dc7c9 9388 lxml_3.7.1-1+deb9u2_amd64.buildinfo Checksums-Sha256: e0fb5fab549d6600beba2e3babb4d4d837b3e44b2fc658a8e2e3f0e3158720d8 2222 lxml_3.7.1-1+deb9u2.dsc e2675c329e8776279b02858c7512f3586bb461d141e5f3895d8fdecab02e384f 10226 lxml_3.7.1-1+deb9u2.diff.gz 5471178930f724f8069737cd6ba8533e6b2dfe487ab89c12f7649add8b62b476 9388 lxml_3.7.1-1+deb9u2_amd64.buildinfo Files: 94c7eebf3b6261b03119c4ba6d371f51 2222 python optional lxml_3.7.1-1+deb9u2.dsc 65984e31e441338a5d0971d1baa59645 10226 python optional lxml_3.7.1-1+deb9u2.diff.gz 75fcaccd36c9d5a9b53b101ccec950c7 9388 python optional lxml_3.7.1-1+deb9u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIYZ1DR4ae5UL01q7ldFmTdL1kUIFAl/bqB8ACgkQldFmTdL1 kULYUA//VYJiYRThMt1uWoHF+EhikjCmIiQ+zd70/v2dzMOC1WbETXs8OEiSqbOI 4y+R+XsC9DgMy45V5Txqhp6o8dMUJQMmMV1gwaEXdIGi/JDEVlMivG4X6Y4l8MIb Cl8O859WrWr+jd9knzVMpQg5wkh80mPAj2D4nCZiFDC585AoDAfG56fu5OzKYKRd jL8I0OQ2R1kpDWs9/B22xC2AlpIM4mC9zzkmEqeOWnM3wYzQ9gWkVZfkygOyOsaU d2DZAWpDaDK24MQvG4Nju2WV1mBys4v3A+8SHXak5X0rAtqeVX74ZzLv6dg7Afbh 7bw1atOFHBAUsyEDYyJAgfk979xtkHe/cVWJrimCaPxGeVEEyM82/Sc6F37IRUQX KJHVv9Q3PdOf2q119hUka2VOF/NDgxdM+UvOJjBoySqcN43IymLM+xfzlzYihhYU J9EG91KIbvh2WGdnwKJycojUJrXaZsLJ7k3/KCQ+dXQqNIYNp68lxgc3yYLFXi4s 6jHwvIB2pt3iyZBJRF7KallyKkVHSN+iWB4rLzsjN5wY4oxaCvAstnkKNUCqnLGm 4GrLhzY9jSRM5bctnUFDH3Vuqj4QoHQUzICRGK3zAaw8fx4W1TE14MgjXJobYbOs e5554pj2/f01Ig0qcXuWfSdEMwFEe63sF0U5EsHhPFFQ3DcKH+g= =r5OM -----END PGP SIGNATURE-----