Commit Graph

2 Commits

Author SHA1 Message Date
Darsh Kelaiya
c77dc0dfc3 python3-lxml: fix CVE-2026-41066
This patch applies the upstream fix as referenced in [2], using the
commit shown in [1].

Regenerate etree.c with the matching Cython 3.0.9 release.  Keep the
iterparse source layout line-stable so that the generated diff contains
only the functional and documentation changes instead of unrelated
source-location updates.

[1] ab431ea0b9
[2] https://github.com/lxml/lxml/security/advisories/GHSA-vfmq-68hx-4jfw

(From OE-Core rev: 1ffb0b524d15aab153553e4739f7d8b697593b8a)

Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-09-21 08:53:17 +01:00
Martin Jansa
fa4c9ed2e5 python3-lxml=v5.0.2
* minor upgrade to fix building with gcc-14 on host
* contains 31 commits:
  https://github.com/lxml/lxml/compare/lxml-5.0.0...lxml-5.0.2
  the important one for gcc-14 is:
  663041a56a

* https://bugs.launchpad.net/lxml/+bug/2045435
* https://bugs.gentoo.org/917562

(From OE-Core rev: baa0ba7084533907c0735dcb58b4432e0b3072df)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-09 05:53:57 -08:00