-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 18 Jun 2026 20:48:59 +0300
Source: lxml-html-clean
Architecture: source
Version: 0.4.4-1~deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Matthias Klose <doko@debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Changes:
lxml-html-clean (0.4.4-1~deb13u1) trixie; urgency=medium
.
* Non-maintainer upload.
* Rebuild for trixie.
- CVE-2026-28348: CSS @import Filter Bypass via Unicode Escapes
- CVE-2026-28350: <base> tag injection through default Cleaner
configuration
.
lxml-html-clean (0.4.4-1) unstable; urgency=medium
.
* New upstream version.
* Bump standards version.
Checksums-Sha1:
ad937cfc6461d57d43ec7f95c10c7ec3572fb3ec 1904 lxml-html-clean_0.4.4-1~deb13u1.dsc
34c0935819acccbdfd30a40af6c2dbd869dce161 25062 lxml-html-clean_0.4.4.orig.tar.gz
67aa02712c70337bb7638edeaea31edaa0e57eeb 3220 lxml-html-clean_0.4.4-1~deb13u1.debian.tar.xz
Checksums-Sha256:
b9fa0a173558bfa3d8f524851eebd2cfbe4fff26aad120bd4caaed8066f780e5 1904 lxml-html-clean_0.4.4-1~deb13u1.dsc
6171d12403e0d9474c97c92db4b3ceaae86936edd967428eb15b7d610b31d4d1 25062 lxml-html-clean_0.4.4.orig.tar.gz
c94b2ac7f4207601dac49f145346c97ff2ace568b046bd36eabe702a2777437b 3220 lxml-html-clean_0.4.4-1~deb13u1.debian.tar.xz
Files:
408babac28a33326e097570c24588b69 1904 python optional lxml-html-clean_0.4.4-1~deb13u1.dsc
a3fa188842ba901fa19cbe150103da81 25062 python optional lxml-html-clean_0.4.4.orig.tar.gz
6754fa7ea26e5a38e7f6aa85141a2510 3220 python optional lxml-html-clean_0.4.4-1~deb13u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=eq+9
-----END PGP SIGNATURE-----