Your message dated Sun, 20 Dec 2020 13:57:50 +0000
with message-id <[email protected]>
and subject line Bug#977387: fixed in lxml 4.3.2-1+deb10u2
has caused the Debian Bug report #977387,
regarding python-lxml: [security regression] AttributeError when importing
lxml.html.clean
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
977387: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977387
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: python-lxml
Version: 4.3.2-1+deb10u1
Severity: important
After upgrading from 4.3.2-1 to 4.3.2-1+deb10u1:
$ python
Python 2.7.16 (default, Oct 10 2019, 22:02:15) [GCC 8.3.0] on linux2
Type "help", "copyright", "credits" or "license" for more information.
import lxml.html.clean
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
File "src/lxml/html/clean.py", line 72, in init lxml.html.clean
AttributeError: 'module' object has no attribute 'ASCII'
Downgrading to 4.3.2-1 makes this work again.
-- System Information:
Debian Release: 10.7
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-13-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages python-lxml depends on:
ii libc6 2.28-10
ii libxml2 2.9.4+dfsg1-7+deb10u1
ii libxslt1.1 1.1.32-2.2~deb10u1
ii python 2.7.16-1
ii zlib1g 1:1.2.11.dfsg-1
Versions of packages python-lxml recommends:
ii python-bs4 4.7.1-1
ii python-html5lib 1.0.1-1
Versions of packages python-lxml suggests:
pn python-lxml-dbg <none>
pn python-lxml-doc <none>
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: lxml
Source-Version: 4.3.2-1+deb10u2
Done: Emilio Pozuelo Monfort <[email protected]>
We believe that the bug you reported is fixed in the latest version of
lxml, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Emilio Pozuelo Monfort <[email protected]> (supplier of updated lxml package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 18 Dec 2020 10:05:56 +0100
Source: lxml
Architecture: source
Version: 4.3.2-1+deb10u2
Distribution: buster-security
Urgency: medium
Maintainer: Matthias Klose <[email protected]>
Changed-By: Emilio Pozuelo Monfort <[email protected]>
Closes: 977387
Changes:
lxml (4.3.2-1+deb10u2) buster-security; urgency=medium
.
* Enable the test suite (non-fatal).
* math-svg.patch: update expected results for the test suite.
* Fix regression in Python 2 in the last part of CVE-2020-27783.
Closes: #977387.
Checksums-Sha1:
1069d9d5c553f1b5e6422436a3c34890b5313d5f 2269 lxml_4.3.2-1+deb10u2.dsc
9ac28455962f37cba3986cb7dc6ae921d34f8ee9 9784
lxml_4.3.2-1+deb10u2.debian.tar.xz
ef574a9338ec3a716c6ee9392ebfcb55b0f2a6dd 6298
lxml_4.3.2-1+deb10u2_source.buildinfo
Checksums-Sha256:
c6c5a6efb3ca135b890ad393a55ecd9cfa9397b9b3a00597eae85fe5691442b0 2269
lxml_4.3.2-1+deb10u2.dsc
687643c34e64558773e07abe13bc40451b30e5f20be407a7ecbb83d8e3339472 9784
lxml_4.3.2-1+deb10u2.debian.tar.xz
e7f67f9f32dd065cb52dae98d0bef97014f5ab83aba595da2b35a2c91f936749 6298
lxml_4.3.2-1+deb10u2_source.buildinfo
Files:
0d064b752f2335f947efcad25e27e61d 2269 python optional lxml_4.3.2-1+deb10u2.dsc
4858e9dfa423dd637061a1957b5beefe 9784 python optional
lxml_4.3.2-1+deb10u2.debian.tar.xz
6a20c4c06cab1e0f3b60553305e4ce76 6298 python optional
lxml_4.3.2-1+deb10u2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=pgS+
-----END PGP SIGNATURE-----
--- End Message ---
