Lucene search

K
oraclelinuxOracleLinuxELSA-2023-2860
HistoryMay 24, 2023 - 12:00 a.m.

python27:2.7 security update

2023-05-2400:00:00
linux.oracle.com
113

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

66.3%

babel
[2.5.1-10]

  • Tue May 31 2016 Nils Philippsen
  • fix source URL
    [2.3.4-1]
  • version 2.3.4
  • always build Python3 subpackages
  • remove obsolete packaging constructs
  • update to current Python packaging guidelines
  • build docs non-destructively
  • tag license file as %license
  • use %python_provide macro only if present
  • update remove-pytz-version patch
  • fix build dependencies
  • set TZ in %check
    [1.3-12]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
    [1.3-11]
  • Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5
    [1.3-10]
  • Also make sure that the babel package that has pybabel depends on the correct
    packages (python2 packages on F23 or less and python3 packages on F24 and
    greater.)
    [1.3-9]
  • Install the python3 version of pybabel on Fedora 24+ to match with Fedora’s
    default python version
    [1.3-8]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
    [1.3-7]
  • Remove pytz version requirement in egginfo as it confuses newer setuptools
    [1.3-6]
  • Change python-setuptools-devel BR into python-setuptools
    [1.3-5]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
    [1.3-4]
  • Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4
    [1.3-3]
  • fix dependencies (#1083470)
    [1.3-2]
  • enable python3 subpackage
    [1.3-1]
  • update to Babel 1.3
  • disabled %check as it tries to download the CLDR
    [0.9.6-9]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
    [0.9.6-8]
  • split documentation off to a separate subpackage
    [0.9.6-7]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
    [0.9.6-6]
  • run tests in %check
  • add pytz build requirement for tests
    [0.9.6-5]
  • rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
    [0.9.6-4]
  • disable building of non-functional python3 subpackage (#761583)
    [0.9.6-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
    [0.9.6-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
    [0.9.6-1]
  • version 0.9.6:
    • Backport r493-494: documentation typo fixes.
    • Make the CLDR import script work with Python 2.7.
    • Fix various typos.
    • Fixed Python 2.3 compatibility (ticket #146, #233).
    • Sort output of list-locales.
    • Make the POT-Creation-Date of the catalog being updated equal to
      POT-Creation-Date of the template used to update (ticket #148).
    • Use a more explicit error message if no option or argument (command) is
      passed to pybabel (ticket #81).
    • Keep the PO-Revision-Date if it is not the default value (ticket #148).
    • Make --no-wrap work by reworking --width’s default and mimic xgettext’s
      behaviour of always wrapping comments (ticket #145).
    • Fixed negative offset handling of Catalog._set_mime_headers (ticket #165).
    • Add --project and --version options for commandline (ticket #173).
    • Add a ne() method to the Local class.
    • Explicitly sort instead of using sorted() and don’t assume ordering
      (Python 2.3 and Jython compatibility).
    • Removed ValueError raising for string formatting message checkers if the
      string does not contain any string formattings (ticket #150).
    • Fix Serbian plural forms (ticket #213).
    • Small speed improvement in format_date() (ticket #216).
    • Fix number formatting for locales where CLDR specifies alt or draft
      items (ticket #217)
    • Fix bad check in format_time (ticket #257, reported with patch and tests by
      jomae)
    • Fix so frontend.CommandLineInterface.run does not accumulate logging
      handlers (#227, reported with initial patch by dfraser)
    • Fix exception if environment contains an invalid locale setting (#200)
  • install python2 rather than python3 executable (#710880)
    [0.9.5-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
    [0.9.5-3]
  • Add python3 subpackage
    [0.9.5-2]
  • Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
    [0.9.5-1]
  • This release contains a small number of bugfixes over the 0.9.4
  • release.
  • What’s New:

    • Fixed the case where messages containing square brackets would break
  • with an unpack error
    • Fuzzy matching regarding plurals should NOT be checked against
  • len(message.id) because this is always 2, instead, it’s should be
  • checked against catalog.num_plurals (ticket #212).
    [0.9.4-5]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
    [0.9.4-4]
  • Added missing requires to python-setuptools for pkg_resources
    [0.9.4-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
    [0.9.4-2]
  • Rebuild for Python 2.6
    [0.9.4-1]
  • Update to 0.9.4
    [0.9.3-1]
  • Update to 0.9.3
    [0.9.1-1]
  • Update to 0.9.1
    [0.9-2]
  • BR python-setuptools-devel
    [0.9-1]
  • Update to 0.9
    [0.8.1-1]
  • Update to 0.8.1
  • Remove upstreamed patch.
    [0.8-3]
  • Replace patch with one that actually applies.
    [0.8-2]
  • Apply upstream patch to rename command line script to ‘pybabel’ - BZ#246208
    [0.8-1]
  • First version for Fedora
    Cython
    [0.28.1-7]
  • Bumping due to problems with modular RPM upgrade path
  • Resolves: rhbz#1695587
    [0.28.1-6]
  • Replace GCC’s attribute optimize(‘Os’) by the better supported and similar (cold).
  • Resolves: rhbz#1658621
    [0.28.1-5]
  • Remove unversioned provides
  • Resolves: rhbz#1628242
    [0.28.1-4]
  • Remove unversioned binaries from python2 subpackage
  • Resolves: rhbz#1613343
    [0.28.1-3]
  • First version for python27 module
    numpy
    [1:1.14.2-16]
  • Fix include path
  • Related: rhbz#1907601
    [1:1.14.2-15]
  • Fix %check
  • Related: rhbz#1907601
    [1:1.14.2-14]
  • Use macros rather than hardcoded paths
  • Resolves: rhbz#1907601
    [1:1.14.2-13]
  • Fix CVE-2019-6446
  • Resolves: rhbz#1668829
    [1.14.2-12]
  • Set proper build flags for https://fedoraproject.org/wiki/Changes/Python_Extension_Flags
  • Resolves: rhbz#1715036
    [1.14.2-11]
  • Fix broken float128 on all arches except x86_64
  • Resolves: rhbz#1688709
    [1.14.2-10]
  • Bumping due to problems with modular RPM upgrade path
  • Resolves: rhbz#1695587
    [1:1.14.2-9]
  • Remove unversioned provides
  • Resolves: rhbz#1628242
    [1:1.14.2-8]
  • Fix unversioned requires/buildrequires
  • Resolves: rhbz#1628242
    [1:1.14.2-7]
  • Bring symlink f2py2 back for symlink modules
  • Resolves: rhbz#1615727
    [1:1.14.2-6]
  • Remove unversioned binaries from python2 subpackage
  • Resolves: rhbz#1613343
    [1:1.14.2-5]
  • Switch python3 coditions to bcond
    [1:1.14.2-4]
  • Use python2 macros instead of unversioned python macros
    [1:1.14.2-3]
  • Change the shebang of f2py to the versioned /usr/bin/python2
    [1:1.14.2-2]
  • Fix incorrect Python version guess when building on Platform-Python
    [1:1.14.2-1]
  • 1.14.2
    [1:1.14.1-1]
  • 1.14.1
    [1:1.14.0-0.rc1.1]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
    [1:1.14.0-0.rc1]
  • 1.14.0 rc1
    [1:1.13.3-5]
  • Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
    [1:1.13.3-4]
  • Split out doc subpackage.
    [1:1.13.3-3]
  • Cleanup spec file conditionals
    [1:1.13.3-2]
  • set proper environment variables for openblas
    [1:1.13.3-1]
  • 1.13.3
    [1:1.13.2-1]
  • 1.13.2
    [1:1.13.1-4]
  • Use openblas where available, BZ 1472318.
    [1:1.13.1-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
    [1:1.13.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
    [1:1.13.1-1]
  • 1.13.1 final
    [1:1.13.0-1]
  • 1.13.0 final
    [1:1.13.0-0.rc2]
  • 1.13.0 rc2
    [1:1.13.0-0.rc1]
  • 1.13.0 rc1
    [1:1.12.1-1]
  • 1.12.1
    [1:1.12.0-1]
  • Update to 1.12.0, build with gcc 7.0.
    [1:1.11.2-2]
  • Rebuild for Python 3.6
    [1:1.11.2-1]
  • Update to 1.11.2 final
    [1:1.11.2-0.rc1]
  • Update to 1.11.2rc1, BZ 1340440.
    [1:1.11.1-2]
  • https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
    [1:1.11.1-1]
  • Update to 1.11.1 final
    [1:1.11.1-0.rc1]
  • Update to 1.11.1rc1, BZ 1340440.
    [1:1.11.0-4]
  • Update to 1.11.0 final
    [1:1.11.0-3.rc2]
  • Update to 1.11.0rc2
    [1:1.11.0-2.b3]
  • Bump Release. 1b2 is higher than 0b3
    [1:1.11.0-0.b3]
  • Update to 1.11.0b2, BZ 1306249.
    [1:1.11.0-1b2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
    [1:1.11.0-0.b2]
  • Update to 1.11.0b2, BZ 1303387.
    [1:1.11.0-020161016.cc2b04git]
  • Update to git snapshot (due to build issue) after 1.11.0b1, BZ 1301943.
    [1:1.10.4-1]
  • Update to 1.10.4, BZ 1296509.
    [1:1.10.2-1]
  • Update to 1.10.2, BZ 1291674.
    [1:1.10.2-0.2.rc2]
  • Update to 1.10.2rc1, BZ 1289550.
    [1:1.10.2-0.1.rc1]
  • Update to 1.10.2rc1
  • Drop opt-flags patch applied upstream
    [1:1.10.1-6]
  • Add provides to satisfy numpy%{_isa} requires in other packages
    [1:1.10.1-5]
  • Re-add provides f2py
    [1:1.10.1-4]
  • Fix obsoletes / provides for numpy -> python2-numpy rename
    [1:1.10.1-3]
  • Remove fortran flags or arm would build with -march=x86-64
    [1:1.10.1-2]
  • Provide python2-* packages
  • Run tests with verbose=2
    [1:1.10.1-1]
  • Update to 1.10.1, BZ 1271022.
    [1:1.10.0-2]
  • Rebuilt for Python3.5 rebuild
    [1:1.10.0-1]
  • Update to 1.10.0 final.
    [1:1.10.0-0.b1]
  • Update to 1.10.0b1, BZ 1252641.
    [1:1.9.2-3]
  • Add python2-numpy provides (bug #1249423)
  • Spec cleanup
    [1:1.9.2-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
    [1:1.9.2-1]
  • Update to 1.9.2
    [1:1.9.1-2]
  • Add upstream patch to fix xerbla linkage (bug #1172834)
    [1:1.9.1-1]
  • Update to 1.9.1, BZ 1160273.
    [1:1.9.0-1]
  • Update to 1.9.0
    [1:1.9.0-0.1.rc1]
  • Update to 1.9.0rc1
    [1:1.8.2-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
    [1:1.8.2-1]
  • Update to 1.8.2
    [1:1.8.1-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
    [1:1.8.1-3]
  • Rebuild for Python 3.4
    [1:1.8.1-2]
  • Fixing FTBFS on ppc64le (#1078354)
    [1:1.8.1-1]
  • Update to 1.8.1
    [1:1.8.0-5]
  • Fix pycache ownership (bug #1072467)
    [1:1.8.0-4]
  • Fix CVE-2014-1858, CVE-2014-1859: #1062009, #1062359
    [1:1.8.0-3]
  • Ship doc module (bug #1034357)
    [1:1.8.0-2]
  • Move f2py documentation to f2py package (bug #1027394)
    [1:1.8.0-1]
  • Update to 1.8.0 final
    [1:1.8.0-0.7.rc2]
  • Update to 1.8.0rc2
  • Create clean site.cfg
  • Use serial atlas
    [1:1.8.0-0.6.b2]
  • Add [atlas] to site.cfg for new atlas library names
    [1:1.8.0-0.5.b2]
  • Update site.cfg for new atlas library names
    [1:1.8.0-0.4.b2]
  • rebuild for atlas 3.10
    [1:1.8.0-0.3.b2]
  • Fix libdir path in site.cfg, BZ 1006242.
    [1:1.8.0-0.2.b2]
  • Update to 1.8.0b2
    [1:1.8.0-0.1.b1]
  • Update to 1.8.0b1
  • Drop f2py patch applied upstream
    [1:1.7.1-5]
  • URL Fix, BZ 1001337
    [1:1.7.1-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
    [1:1.7.1-3]
  • Fix rpmlint warnings
  • Update License
  • Apply patch: change shebang of f2py to use binary directly
    [1:1.7.1-2]
  • Specfile cleanup (bug #969854)
    [1:1.7.1-1]
  • Update to 1.7.1
    [1:1.7.0-1]
  • Update to 1.7.0 final
    [1:1.7.0-0.5.rc1]
  • Update to 1.7.0rc1
    [1:1.7.0-0.4.b2]
  • Update to 1.7.0b2
  • Drop patches applied upstream
    [1:1.7.0-0.3.b1]
  • Add patch from github pull 371 to fix python 3.3 pickle issue
  • Remove cython .c source regeneration - fails now
    [1:1.7.0-0.2.b1]
  • add workaround for rhbz#849713 (fixes FTBFS)
    [1:1.7.0-0.1.b1]
  • Update to 1.7.0b1
  • Rebase python 3.3 patchs to current git master
  • Drop patches applied upstream
    [1:1.6.2-5]
  • rework patches for 3.3 to more directly reflect upstream’s commits
  • re-enable test suite on python 3
  • forcibly regenerate Cython .c source to avoid import issues on Python 3.3
    [1:1.6.2-4]
  • rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
  • needs unicode patch
    [1:1.6.2-3]
  • remove rhel logic from with_python3 conditional
    [1:1.6.2-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
    [1:1.6.2-1]
  • Update to 1.6.2 final
    [1:1.6.2rc1-0.1]
  • Update to 1.6.2rc1
    [1:1.6.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
    [1:1.6.1-1]
  • Update to 1.6.1
    [1:1.6.0-2]
  • Bump and rebuild for BZ 712251.
    [1:1.6.0-1]
  • Update to 1.6.0 final
    [1:1.6.0-0.2.b2]
  • Update to 1.6.0b2
  • Drop import patch fixed upstream
    [1:1.6.0-0.1.b1]
  • Update to 1.6.0b1
  • Build python3 module with python3
  • Add patch from upstream to fix build time import error
    [1:1.5.1-1]
  • Update to 1.5.1 final
    [1:1.5.1-0.4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
    [1:1.5.1-0.3]
  • fix the AttributeError during tests
  • fix build on s390(x)
    [1:1.5.1-0.2]
  • rebuild for newer python3
    [1:1.5.1-0.1]
  • update to 1.5.1rc1
  • add python3 subpackage
  • some spec-cleanups
    [1:1.4.1-6]
  • actually add the patch this time
    [1:1.4.1-5]
  • fix segfault within %check on 2.7 (patch 2)
    [1:1.4.1-4]
  • Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
    [1.4.1-3]
  • ignore the ‘Ticket #1299 second test’ failure on s390(x)
    [1.4.1-2]
  • source commit fix
    [1.4.1-1]
  • New upstream release. Include backported doublefree patch
    [1.3.0-8]
  • Moved distutils back to the main package, BZ 572820.
    [1.3.0-7]
  • Reverted to 1.3.0 after upstream pulled 1.4.0, BZ 579065.
    [1.4.0-5]
  • Linking /usr/include/numpy to .h files, BZ 185079.
    [1.4.0-4]
  • Re-enabling atlas BR, dropping lapack Requires.
    [1.4.0-3]
  • Since the previous didn’t work, Requiring lapack.
    [1.4.0-2]
  • Temporarily dropping atlas BR to work around 562577.
    [1.4.0-1]
  • 1.4.0.
  • Dropped ARM patch, ARM support added upstream.
    [1.3.0-6.fa1]
  • Add ARM support
    [1.3.0-6]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
    [1.3.0-5]
  • Fixed atlas BR, BZ 505376.
    [1.3.0-4]
  • EVR bump for pygame chainbuild.
    [1.3.0-3]
  • Moved linalg, fft back to main package.
    [1.3.0-2]
  • Split out f2py into subpackage, thanks Peter Robinson [email protected].
    [1.3.0-1]
  • Update to latest upstream.
  • Fixed Source0 URL.
    [1.3.0-0.rc1]
  • Update to latest upstream.
    [1.2.1-3]
  • Require python-devel, BZ 488464.
    [1.2.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
    [1.2.1-1]
  • Update to 1.2.1.
    [1.2.0-2]
  • Rebuild for Python 2.6
    [1.2.0-1]
  • New upstream release, added python-nose BR. BZ 465999.
  • Using atlas blas, not blas-devel. BZ 461472.
    [1.1.1-1]
  • New upstream release
    [1.1.0-1]
  • New upstream release
    [1.0.4-1]
  • New upstream release
    [1.0.3.1-2]
  • Add python egg to %files on f9+
    [1.0.3.1-1]
  • New upstream release
    [1.0.3-1]
  • New upstream release
    [1.0.2-2]
  • Drop BR: atlas-devel, since it just provides binary-compat
    blas and lapack libs. Atlas can still be optionally used
    at runtime. (Note: this is all per the atlas maintainer).
    [1.0.2-1]
  • New upstream release
    [1.0.1-4]
  • Update gfortran patch to recognize latest gfortran f95 support
  • Resolves rhbz#236444
    [1.0.1-3]
  • Fix up cpuinfo bug (#229753). Upstream bug/change:
    http://projects.scipy.org/scipy/scipy/ticket/349
    [1.0.1-2]
  • Per discussion w/Jose Matos, Obsolete/Provide f2py, as the
    stand-alone one is no longer supported/maintained upstream
    [1.0.1-1]
  • New upstream release
    [1.0-2]
  • Rebuild for python 2.5
    [1.0-1]
  • New upstream release
    [0.9.8-1]
  • New upstream release
    [0.9.6-1]
  • Upstream update
    [0.9.5-1]
  • Upstream update
    [0.9.4-2]
  • Rebuild for Fedora Extras 5
    [0.9.4-1]
  • Initial RPM release
  • Added gfortran patch from Neal Becker
    pytest
    python2-pip
    [9.0.3-19]
  • Remove bundled windows executables
  • Resolves: rhbz#2006792
    python2
    [2.7.18-12.0.1]
  • Add Oracle Linux distribution in platform.py [Orabug: 20812544]
    [2.7.18-12]
  • Security fix for CVE-2022-45061: CPU denial of service via inefficient IDNA decoder
    Resolves: rhbz#2144072
    python2-rpm-macros
    python2-setuptools
    [39.0.1-13]
  • When building for Flatpak inclusion, build in bootstrap mode
    Resolves: rhbz#1907597
    python2-six
    [1.11.0-6]
  • Rename component name to python2-six, clean specfile and remove bconds
  • Resolves: rhbz#1908300
    [1.11.0-5]
  • Bumping due to problems with modular RPM upgrade path
  • Resolves: rhbz#1695587
    [1.11.0-4]
  • Run tests only of the Python versions that are actually built
    [1.11.0-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
    [1.11.0-2]
  • Removed and obsoleted the platform-python subpackage
    [1.11.0-1]
  • Update to 1.11.0
    [1.10.0-11]
  • Added the platform-python subpackage
    [1.10.0-10]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
    [1.10.0-9]
  • Fix unversioned Python BuildRequires
    [1.10.0-8]
  • Rebuild as wheel
    [1.10.0-7]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
    [1.10.0-6]
  • Enable tests
    [1.10.0-5]
  • Rebuild for Python 3.6
  • Disable python3 tests
    [1.10.0-4]
  • Modernize spec more
  • Depend on system-python(abi)
  • Cleanups
    [1.10.0-3]
  • https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
    [1.10.0-2]
  • Modernize spec
  • Fix python3 package file ownership
    [1.10.0-1]
    python-attrs
    python-backports
    [1.0-16]
  • Update python macros to python2 versioned macros
  • Issue found when rebuilding the python27 module to include CVE fixes
  • Related: rhbz#1883890 rhbz#1883258
    python-backports-ssl_match_hostname
    [3.5.0.1-12]
  • Remove unversioned Provides
  • Resolves: rhbz#1908300
    python-chardet
    [3.0.4-10]
  • Bumping due to problems with modular RPM upgrade path
  • Resolves: rhbz#1695587
    [3.0.4-9]
  • Remove unversioned binaries from python2 subpackage
  • Resolves: rhbz#1613343
    [3.0.4-8]
  • Switch python3 conditions to bcond
    [3.0.4-7]
  • First version for python27 module
    python-coverage
    [4.5.1-4]
  • Bumping due to problems with modular RPM upgrade path
  • Resolves: rhbz#1695587
    [4.5.1-3]
  • Remove unversioned binaries from python2 subpackage
  • Resolves: rhbz#1613343
    [4.5.1-2]
  • Make possible to disable python3 subpackage
    [4.5.1-1]
  • update to 4.5.1
    [4.5-1]
  • update to 4.5
    [4.4.2-1]
  • update to 4.4.2
    [4.4.1-6]
  • Use better Obsoletes for platform-python
    [4.4.1-5]
  • Remove platform-python subpackage
  • Cleanup spec
    [4.4.1-4]
  • Add platform-python subpackage
    [4.4.1-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
    [4.4.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
    [4.4.1-1]
  • update to 4.4.1
    [4.4-1]
  • update to 4.4
    [4.3.3-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
    [4.3.3-1]
  • update to 4.3.3
    [4.3.1-1]
  • update to 4.3.1
    [4.2-2]
  • Rebuild for Python 3.6
    [4.2-1]
  • 4.2 final
    [4.2-0.2.b1]
  • https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
    [4.2-0.1.b1]
  • update to 4.2b1
    [4.1-1]
  • update to 4.1
    [4.1-0.5.b3]
  • update to 4.1b3
    [4.1-0.4.b2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
    [4.1-0.3.b2]
  • update to 4.1b2
    [4.1-0.2.b1]
  • Fix and install license
  • Cleanup and modernize spec
  • Note bundled jquery libraries
    [4.1-0.1.b1]
  • update to 4.1b1
    [4.0.3-1]
  • update to 4.0.3
    [4.0.2-2]
  • Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5
    [4.0.2-1]
  • update to 4.0.2
    [4.0.1-1]
  • update to 4.0.1
    [4.0-1]
  • update to 4.0 final
    [4.0-0.13.b3]
  • Rebuilt for Python3.5 rebuild
    [4.0-0.12.b3]
  • update to 4.0b3
    [4.0-0.11.b2]
  • update to 4.0b2
    [4.0-0.10.b1]
  • update to 4.0b1
    [4.0-0.9.a6]
  • add missing Provides: python2-coverage
    [4.0-0.8.a6]
  • update to 4.0a6
    [4.0-0.7.a5]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
    [4.0-0.6.a5]
  • No longer run 2to3 on the python3 sources.
    [4.0-0.5.a5]
  • unicode fixup
    [4.0-0.4.a5]
  • update to 4.0a5
    [4.0-0.3.a3]
  • update to 4.0a3
    [4.0-0.2.a2]
  • update to 4.0a2
    [4.0-0.1.a]
  • Update to 4.0a1
    [3.7.1-1]
  • Update to 3.7.1 (#1043090)
    [3.7-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
    [3.7-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
    [3.7-2]
  • Rebuild for Python 3.4
    [3.7-1]
  • update to 3.7
  • fix macros for current guidelines
  • rename binary (with compat symlinks)
    [3.6-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
    [3.6-1]
  • update to 3.6 final
    [3.6-0.3.b3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
    [3.6-0.3.b3]
  • update to 3.6beta3
    [3.6-0.1.b1]
  • update to 3.6beta1
  • patch0 merged into upstream
    [3.5.3-2]
  • Patch from upstream for traceback when people use this with python2 and
    python3 in the same directory
    [3.5.3-1]
  • update to 3.5.3
    [3.5.2-0.4.b1]
  • rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
    [3.5.2-0.3.b1]
  • remove rhel logic from with_python3 conditional
    [3.5.2-0.2.b1]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
    [3.5.2-0.1.b1]
  • update to 3.5.2b1
    [3.5.1-0.2.b1]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
    [3.5.1-0.1.b1]
  • update to 3.5.1b1
    [3.5-0.1.b1]
  • update to 3.5b1
    [3.4-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
    [3.4-2]
  • rebuild for newer python3
    [3.4-1]
  • Update to 3.4 (#631751)
    [3.3.1-4]
  • Rebuild against Python 3.2
    [3.3.1-3]
  • Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
    [3.3.1-2]
  • Fix license tag, permissions, and filtering extraneous provides
    [3.3.1-1]
  • Update to 3.3.1
    [3.2-3]
  • add python 3 subpackage (#536948)
    [3.2-2]
  • Require python-setuptools (#556290)
    [3.2-1]
  • update to 3.2
    [3.1-1]
  • Update to 3.1
    [3.0.1-1]
  • update to 3.0.1
    [2.85-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
    [2.85-2]
  • fix install invocation
    [2.85-1]
  • Initial package for Fedora
    python-dns
    python-docs
    [2.7.16-2]
  • Bumping due to problems with modular RPM upgrade path
  • Resolves: rhbz#1695587
    [2.7.16-1]
  • Update to 2.7.16
    Resolves: rhbz#1680967
    [2.7.15-3]
  • Modify for prebuilding and deploying on RHEL8
  • Rename the info page to python2
  • Resolves: rhbz#1656048
    [2.7.15-2]
  • Modify for building on RHEL8
  • Disable the tests, because the linkchecker package isn’t available in RHEL8
  • Resolves: rhbz#1656048
    [2.7.15-1]
  • Update to 2.7.15
    [2.7.14-5]
  • Only recommend the python2 package
    [2.7.14-4]
  • Remove Obsoletes tag from when python was renamed to python2 (Fedora 25 was last)
    [2.7.14-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
    [2.7.14-2]
  • Fix ambiguous Python 2 dependencies declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
    [2.7.14-1]
  • Update to 2.7.14
    [2.7.13-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
    [2.7.13-3]
  • Change fixed Obsoletes version with a dynamic one (rhbz#1457336)
    [2.7.13-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
    [2.7.13-1]
  • Update to 2.7.13
  • Rename package to python2-docs
    [2.7.12-2]
  • Remove unversioned Obsoletes.
    [2.7.12-1]
  • Update to 2.7.12.
    [2.7.11-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
    [2.7.11-1]
  • Update to 2.7.11
    [2.7.10-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
    [2.7.10-1]
  • Update to 2.7.10
    [2.7.9-1]
  • Update to 2.7.9
    [2.7.8-1]
  • Update to 2.7.8
    [2.7.7-1]
  • Update to 2.7.7
    [2.7.6-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
    [2.7.6-1]
  • Updated to v2.7.6
    [2.7.5-6]
  • Used _pkgdocdir instead of _docdir
    [2.7.5-5]
  • Small tweaks of Suvayu’s patch
    [2.7.5-4]
  • Enable Texinfo builder, add subpackage with python info pages
    [2.7.5-3]
  • Spec cleanup
    [2.7.5-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
    [2.7.5-1]
  • Version 2.7.5.
    [2.7.4-1]
  • Version 2.7.4.
    [2.7.3-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
    [2.7.3-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
    [2.7.3-2]
  • make link checking optional, to avoid needing to pull in linkchecker and
    its dependencies (rbhz#823930)
    [2.7.3-1]
  • 2.7.3
    [2.7.2-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
    [2.7.2-2]
  • fix broken link to ‘Global Module Index’, and add a %check, verifying the
    absence of broken links (rhbz#670493)
    [2.7.2-1]
  • 2.7.2
    [2.7.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
    [2.7.1-1]
  • 2.7.1
    [2.7-1]
  • Update to 2.7
    [2.6.5-1]
  • move to 2.6.5: http://www.python.org/download/releases/2.6.5/
    [2.6.4-3]
  • fix %description (bug #559710)
    [2.6.4-2]
  • update sources for 2.6.4
    [2.6.4-1]
  • move to 2.6.4
  • drop build requirement on python-jinja; python-sphinx requires python-jinja2
    (bug 532135)
    [2.6.2-1]
  • Move to 2.6.2 like python itself.
    [2.6-5]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
    [2.6-4]
  • Fix import error (#511647)
    [2.6-3]
  • Spec file cleanup (#226341)
    [2.6-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
    [2.6-1]
  • Update to 2.6
    [2.5.2-1]
  • Move to 2.5.2 like python itself.
    [2.5.1-3]
  • fix license tag
    [2.5.1-2]
  • mkdir a build root to keep recent rpm/mock happy.
    [2.5.1-1]
  • update to 2.5.1
    [2.5-1]
  • update to 2.5
    [2.4.4-1]
  • update to 2.4.4
    [2.4.3-1.1]
  • rebuild
    [2.4.3-1]
  • updated to 2.4.3
  • Fri Dec 09 2005 Jesse Keating

    • Prevent tree cycle creation when adding Elements as siblings.
    • LP#1361948: crash when deallocating Element siblings without parent.
    • LP#1354652: crash when traversing internally loaded documents in XSLT
  • extension functions.
  • Sun Aug 17 2014 Fedora Release Engineering

    • HTML cleaning could fail to strip javascript links that mix control
  • characters into the link scheme.
    [3.3.4-1]
  • 3.3.4 (2014-04-03)
  • ==================
  • Features added

    • Source line numbers above 65535 are available on Elements when
  • using libxml2 2.9 or later.
  • Bugs fixed

    • lxml.html.fragment_fromstring() failed for bytes input in Py3.
      [3.3.3-4]
  • Fix macro definition
    [3.3.3-3]
  • Add python3-cssselect to correct package
    [3.3.3-3]
  • python3-cssselect is not available on F19
    [3.3.3-2]
  • BZ#1075070 add requires and buildrequires for cssselect
    [3.3.3-1]
  • 3.3.3 (2014-03-04)
  • ==================
  • Bugs fixed

    • LP#1287118: Crash when using Element subtypes with slots.
  • Other changes

    • The internal classes _LogEntry and _Attrib can no longer be
  • subclassed from Python code.
    [3.3.2-2]
  • Add check section #1075070
    [3.3.2-1]
  • 3.3.2 (2014-02-26)
  • ==================
  • Bugs fixed

    • The properties resolvers and version, as well as the methods
  • set_element_class_lookup() and makeelement(), were lost from
  • iterparse objects.
    • LP#1222132: instances of XMLSchema, Schematron and RelaxNG
  • did not clear their local error_log before running a validation.
    • LP#1238500: lxml.doctestcompare mixed up ‘expected’ and ‘actual’ in
  • attribute values.
    • Some file I/O tests were failing in MS-Windows due to incorrect temp
  • file usage. Initial patch by Gabi Davar.
    • LP#910014: duplicate IDs in a document were not reported by DTD
  • validation.
    • LP#1185332: tostring(method=‘html’) did not use HTML serialisation
  • semantics for trailing tail text. Initial patch by Sylvain Viollon.
    • LP#1281139: .attrib value of Comments lost its mutation methods
  • in 3.3.0. Even though it is empty and immutable, it should still
  • provide the same interface as that returned for Elements.
    [3.3.2-1]
  • 3.3.1 (2014-02-12)
  • ==================
  • Bugs fixed

    • LP#1014290: HTML documents parsed with parser.feed() failed to find
  • elements during tag iteration.
    • LP#1273709: Building in PyPy failed due to missing support for
  • PyUnicode_Compare() and PyByteArray_*() in PyPy’s C-API.
    • LP#1274413: Compilation in MSVC failed due to missing ‘stdint.h’ standard
  • header file.
    • LP#1274118: iterparse() failed to parse BOM prefixed files.
      [3.3.0-2]
  • Update Cython requirement to >= 0.20
    [3.3.0-1]
  • 3.3.0 (2014-01-26)
  • ==================
  • Features added

  • Bugs fixed

    • The heuristic that distinguishes file paths from URLs was tightened
  • to produce less false negatives.
  • Other changes

  • 3.3.0beta5 (2014-01-18)
  • =======================
  • Features added

    • The PEP 393 unicode parsing support gained a fallback for wchar strings
  • which might still be somewhat common on Windows systems.
  • Bugs fixed

    • Several error handling problems were fixed throughout the code base that
  • could previously lead to exceptions being silently swallowed or not
  • properly reported.
    • The C-API function appendChild() is now deprecated as it does not
  • propagate exceptions (its return type is void). The new function
  • appendChildToElement() was added as a safe replacement.
    • Passing a string into fromstringlist() raises an exception instead of
  • parsing the string character by character.
  • Other changes

    • Document cleanup code was simplified using the new GC features in
  • Cython 0.20.
  • 3.3.0beta4 (2014-01-12)
  • =======================
  • Features added

  • Bugs fixed

    • The (empty) value returned by the attrib property of Entity and
  • Comment objects was mutable.
    • Element class lookup wasn’t available for the new pull parsers or when
  • using a custom parser target.
    • Setting Element attributes on instantiation with both the attrib
  • argument and keyword arguments could modify the mapping passed as
  • attrib.
    • LP#1266171: DTDs instantiated from internal/external subsets (i.e.
  • through the docinfo property) lost their attribute declarations.
  • Other changes

    • Built with Cython 0.20pre (gitrev 012ae82eb) to prepare support for
  • Python 3.4.
  • 3.3.0beta3 (2014-01-02)
  • =======================
  • Features added

    • Unicode string parsing was optimised for Python 3.3 (PEP 393).
  • Bugs fixed

    • HTML parsing of Unicode strings could misdecode the input on some
  • platforms.
    • Crash in xmlfile() when closing open elements out of order in an error
  • case.
  • Other changes

  • 3.3.0beta2 (2013-12-20)
  • =======================
  • Features added

    • iterparse() supports the recover option.
  • Bugs fixed

    • Crash in iterparse() for HTML parsing.
    • Crash in target parsing with attributes.
  • Other changes

    • The safety check in the read-only tree implementation (e.g. used by
  • PythonElementClassLookup) raises a more appropriate
  • ReferenceError for illegal access after tree disposal instead of
  • an AssertionError. This should only impact test code that
  • specifically checks the original behaviour.
  • 3.3.0beta1 (2013-12-12)
  • =======================
  • Features added

    • New option handle_failures in make_links_absolute() and
  • resolve_base_href() (lxml.html) that enables ignoring or
  • discarding links that fail to parse as URLs.
    • New parser classes XMLPullParser and HTMLPullParser for
  • incremental parsing, as implemented for ElementTree in Python 3.4.
    • iterparse() enables recovery mode by default for HTML parsing
  • (html=True).
  • Bugs fixed

    • LP#1255132: crash when trying to run validation over non-Element (e.g.
  • comment or PI).
    • Error messages in the log and in exception messages that originated
  • from libxml2 could accidentally be picked up from preceding warnings
  • instead of the actual error.
    • The ElementMaker in lxml.objectify did not accept a dict as
  • argument for adding attributes to the element it’s building. This
  • works as in lxml.builder now.
    • LP#1228881: repr(XSLTAccessControl) failed in Python 3.
    • Raise ValueError when trying to append an Element to itself or
  • to one of its own descendants, instead of running into an infinite
  • loop.
    • LP#1206077: htmldiff discarded whitespace from the output.
    • Compressed plain-text serialisation to file-like objects was broken.
    • lxml.html.formfill: Fix textarea form filling.
  • The textarea used to be cleared before the new content was set,
  • which removed the name attribute.
  • Other changes

    • Some basic API classes use freelists internally for faster
  • instantiation. This can speed up some iterparse() scenarios,
  • for example.
    • iterparse() was rewritten to use the new *PullParser
  • classes internally instead of being a parser itself.
    [3.2.4-1]
  • 3.2.4 (2013-11-07)
  • ==================
  • Bugs fixed

    • Memory leak when creating an XPath evaluator in a thread.
    • LP#1228881: repr(XSLTAccessControl) failed in Python 3.
    • Raise ValueError when trying to append an Element to itself or
  • to one of its own descendants.
    • LP#1206077: htmldiff discarded whitespace from the output.
    • Compressed plain-text serialisation to file-like objects was broken.
      [3.2.3-2]
  • Add requirement for on python-cssselect for the python2 version
    [3.2.3-1]
  • and here’s a version 3.2.3. The last release accidentally lost the ability
  • to work on Python 2.4. There are no other changes over 3.2.2.
  • 3.2.2 (2013-07-28)
  • ==================
  • Features added

  • Bugs fixed

    • LP#1185701: spurious XMLSyntaxError after finishing iterparse().
    • Crash in lxml.objectify during xsi annotation.
  • Other changes

    • Return values of user provided element class lookup methods are now
  • validated against the type of the XML node they represent to prevent
  • API class mismatches.
    [3.2.1-1]
  • 3.2.1 (2013-05-11)
  • ==================
  • Features added

    • The methods apply_templates() and process_children() of XSLT
  • extension elements have gained two new boolean options elements_only
  • and remove_blank_text that discard either all strings or
  • whitespace-only strings from the result list.
  • Bugs fixed

    • When moving Elements to another tree, the namespace cleanup mechanism
  • no longer drops namespace prefixes from attributes for which it finds
  • a default namespace declaration, to prevent them from appearing as
  • unnamespaced attributes after serialisation.
    • Returning non-type objects from a custom class lookup method could lead
  • to a crash.
    • Instantiating and using subtypes of Comments and ProcessingInstructions
  • crashed.
    [3.2.0-1]
  • 3.2.0 (2013-04-28)
  • ==================
  • Features added

  • Bugs fixed

    • LP#690319: Leading whitespace could change the behaviour of the string
  • parsing functions in lxml.html.
    • LP#599318: The string parsing functions in lxml.html are more robust
  • in the face of uncommon HTML content like framesets or missing body tags.
  • Patch by Stefan Seelmann.
    • LP#712941: I/O errors while trying to access files with paths that
  • contain non-ASCII characters could raise UnicodeDecodeError instead
  • of properly reporting the IOError.
    • LP#673205: Parsing from in-memory strings disabled network access in the
  • default parser and made subsequent attempts to parse from a URL fail.
    • LP#971754: lxml.html.clean appends ‘nofollow’ to ‘rel’ attributes instead
  • of overwriting the current value.
    • LP#715687: lxml.html.clean no longer discards scripts that are explicitly
  • allowed by the user provided whitelist. Patch by Christine Koppelt.
  • 3.1.2 (2013-04-12)
  • ==================
  • Bugs fixed

    • LP#1136509: Passing attributes through the namespace-unaware API of
  • the sax bridge (i.e. the handler.startElement() method) failed
  • with a TypeError. Patch by Mike Bayer.
    • LP#1123074: Fix serialisation error in XSLT output when converting
  • the result tree to a Unicode string.
    • GH#105: Replace illegal usage of xmlBufLength() in libxml2 2.9.0
  • by properly exported API function xmlBufUse().
  • 3.1.1 (2013-03-29)
  • ==================
  • Features added

  • Bugs fixed

    • LP#1160386: Write access to lxml.html.FormElement.fields raised
  • an AttributeError in Py3.
    • Illegal memory access during cleanup in incremental xmlfile writer.
  • Other changes

    • The externally useless class lxml.etree._BaseParser was removed
  • from the module dict.
    [3.1.0-1]
  • 3.1.0 (2013-02-10)
  • ==================
  • Features added

    • GH#89: lxml.html.clean allows overriding the set of attributes that it
  • considers ‘safe’. Patch by Francis Devereux.
  • Bugs fixed

    • LP#1104370: copy.copy(el.attrib) raised an exception. It now returns
  • a copy of the attributes as a plain Python dict.
    • GH#95: When used with namespace prefixes, the el.find*() methods
  • always used the first namespace mapping that was provided for each
  • path expression instead of using the one that was actually passed
  • in for the current run.
    • LP#1092521, GH#91: Fix undefined C symbol in Python runtimes compiled
  • without threading support. Patch by Ulrich Seidl.
  • Other changes

  • 3.1beta1 (2012-12-21)
  • =====================
  • Features added

    • New build-time option --with-unicode-strings for Python 2 that
  • makes the API always return Unicode strings for names and text
  • instead of byte strings for plain ASCII content.
    • New incremental XML file writing API etree.xmlfile().
    • E factory in lxml.objectify is callable to simplify the creation of
  • tags with non-identifier names without having to resort to getattr().
  • Bugs fixed

    • When starting from a non-namespaced element in lxml.objectify, searching
  • for a child without explicitly specifying a namespace incorrectly found
  • namespaced elements with the requested local name, instead of restricting
  • the search to non-namespaced children.
    • GH#85: Deprecation warnings were fixed for Python 3.x.
    • GH#33: lxml.html.fromstring() failed to accept bytes input in Py3.
    • LP#1080792: Static build of libxml2 2.9.0 failed due to missing file.
  • Other changes

    • The externally useless class _ObjectifyElementMakerCaller was
  • removed from the module API of lxml.objectify.
    • LP#1075622: lxml.builder is faster for adding text to elements with
  • many children. Patch by Anders Hammarquist.
    [3.0.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
    [3.0.1-1]
  • 3.0.1 (2012-10-14)
  • Bugs fixed
    • LP#1065924: Element proxies could disappear during garbage collection
  • in PyPy without proper cleanup.
    • GH#71: Failure to work with libxml2 2.6.x.
    • LP#1065139: static MacOS-X build failed in Py3.
      [3.0-1]
  • 3.0 (2012-10-08)
  • ================
  • Features added

  • Bugs fixed

    • End-of-file handling was incorrect in iterparse() when reading from
  • a low-level C file stream and failed in libxml2 2.9.0 due to its
  • improved consistency checks.
  • Other changes

    • The build no longer uses Cython by default unless the generated C files
  • are missing. To use Cython, pass the option ‘–with-cython’. To ignore
  • the fatal build error when Cython is required but not available (e.g. to
  • run special setup.py commands that do not actually run a build), pass
  • ‘–without-cython’.
  • 3.0beta1 (2012-09-26)
  • =====================
  • Features added

    • Python level access to (optional) libxml2 memory debugging features
  • to simplify debugging of memory leaks etc.
  • Bugs fixed

    • Fix a memory leak in XPath by switching to Cython 0.17.1.
    • Some tests were adapted to work with PyPy.
  • Other changes

    • The code was adapted to work with the upcoming libxml2 2.9.0 release.
  • 3.0alpha2 (2012-08-23)
  • ======================
  • Features added

    • The .iter() method of elements now accepts tag arguments like ‘{*}name’
  • to search for elements with a given local name in any namespace. With
  • this addition, all combinations of wildcards now work as expected:
  • ‘{ns}name’, ‘{}name’, ‘{}name’, '{ns}’, ‘{}’ and '{}*’. Note that
  • ‘name’ is equivalent to ‘{}name’, but ‘’ is '{}*’. The same change
  • applies to the .getiterator(), .itersiblings(), .iterancestors(),
  • .iterdescendants(), .iterchildren() and .itertext() methods, the
  • strip_attributes(), strip_elements() and strip_tags() functions as well
  • as the iterparse() function.
    • C14N allows specifying the inclusive prefixes to be promoted to
  • top-level during exclusive serialisation.
  • Bugs fixed

    • Passing long Unicode strings into the feed() parser interface failed to
  • read the entire string.
  • Other changes

  • 3.0alpha1 (2012-07-31)
  • ======================
  • Features added

    • Initial support for building in PyPy (through cpyext).
    • DTD objects gained an API that allows read access to their
  • declarations.
    • xpathgrep.py gained support for parsing line-by-line (e.g.
  • from grep output) and for surrounding the output with a new root
  • tag.
    • E-factory in lxml.builder accepts subtypes of known data
  • types (such as string subtypes) when building elements around them.
    • Tree iteration and iterparse() with a selective tag
  • argument supports passing a set of tags. Tree nodes will be
  • returned by the iterators if they match any of the tags.
  • Bugs fixed

    • The .find*() methods in lxml.objectify no longer use XPath
  • internally, which makes them faster in many cases (especially when
  • short circuiting after a single or couple of elements) and fixes
  • some behavioural differences compared to lxml.etree. Note that
  • this means that they no longer support arbitrary XPath expressions
  • but only the subset that the ElementPath language supports.
  • The previous implementation was also redundant with the normal
  • XPath support, which can be used as a replacement.
    • el.find(‘*’) could accidentally return a comment or processing
  • instruction that happened to be in the wrong spot. (Same for the
  • other .find*() methods.)
    • The error logging is less intrusive and avoids a global setup where
  • possible.
    • Fixed undefined names in html5lib parser.
    • Element.attrib.update() did not accept an attrib of
  • another Element as parameter.
    • For subtypes of ElementBase that make the .text or .tail
  • properties immutable (as in objectify, for example), inserting text
  • when creating Elements through the E-Factory feature of the class
  • constructor would fail with an exception, stating that the text
  • cannot be modified.
  • Other changes

    • The code base was overhauled to properly use ‘const’ where the API
  • of libxml2 and libxslt requests it. This also has an impact on the
  • public C-API of lxml itself, as defined in etreepublic.pxd, as
  • well as the provided declarations in the lxml/includes/ directory.
  • Code that uses these declarations may have to be adapted. On the
  • plus side, this fixes several C compiler warnings, also for user
  • code, thus making it easier to spot real problems again.
    • The functionality of ‘lxml.cssselect’ was moved into a separate PyPI
  • package called ‘cssselect’. To continue using it, you must install
  • that package separately. The ‘lxml.cssselect’ module is still
  • available and provides the same interface, provided the ‘cssselect’
  • package can be imported at runtime.
    • Element attributes passed in as an attrib dict or as keyword
  • arguments are now sorted by (namespaced) name before being created
  • to make their order predictable for serialisation and iteration.
  • Note that adding or deleting attributes afterwards does not take
  • that order into account, i.e. setting a new attribute appends it
  • after the existing ones.
    • Several classes that are for internal use only were removed
  • from the lxml.etree module dict:
  • _InputDocument, _ResolverRegistry, _ResolverContext, _BaseContext,
  • _ExsltRegExp, _IterparseContext, _TempStore, _ExceptionContext,
  • __ContentOnlyElement, _AttribIterator, _NamespaceRegistry,
  • _ClassNamespaceRegistry, _FunctionNamespaceRegistry,
  • _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
  • _FileReaderContext, _ParserContext, _PythonSaxParserTarget,
  • _TargetParserContext, _ReadOnlyProxy, _ReadOnlyPIProxy,
  • _ReadOnlyEntityProxy, _ReadOnlyElementProxy, _OpaqueNodeWrapper,
  • _OpaqueDocumentWrapper, _ModifyContentOnlyProxy,
  • _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
  • _AppendOnlyElementProxy, _SaxParserContext, _FilelikeWriter,
  • _ParserSchemaValidationContext, _XPathContext,
  • _XSLTResolverContext, _XSLTContext, _XSLTQuotedStringParam
    • Several internal classes can no longer be inherited from:
  • _InputDocument, _ResolverRegistry, _ExsltRegExp, _ElementUnicodeResult,
  • _IterparseContext, _TempStore, _AttribIterator, _ClassNamespaceRegistry,
  • _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
  • _FileReaderContext, _PythonSaxParserTarget, _TargetParserContext,
  • _ReadOnlyPIProxy, _ReadOnlyEntityProxy, _OpaqueDocumentWrapper,
  • _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
  • _AppendOnlyElementProxy, _FilelikeWriter, _ParserSchemaValidationContext,
  • _XPathContext, _XSLTResolverContext, _XSLTContext,
  • _XSLTQuotedStringParam, _XSLTResultTree, _XSLTProcessingInstruction
    [2.3.5-1]
  • Bugs fixed
    • Crash when merging text nodes in element.remove().
    • Crash in sax/target parser when reporting empty doctype.
      [2.3.4-1]
  • Bugs fixed
    • Crash when building an nsmap (Element property) with empty namespace
  • URIs.
    • Crash due to race condition when errors (or user messages) occur during
  • threaded XSLT processing (or compilation).
    • XSLT stylesheet compilation could ignore compilation errors.
      [2.3.3-4]
  • rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
    [2.3.3-3]
  • remove rhel logic from with_python3 conditional
    [2.3.3-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
    [2.3.3-1]
  • 2.3.3 (2012-01-04)
  • Features added
    • lxml.html.tostring() gained new serialisation options with_tail and
  • doctype.
  • Bugs fixed
    • Fixed a crash when using iterparse() for HTML parsing and requesting
  • start events.
    • Fixed parsing of more selectors in cssselect. Whitespace before pseudo-
  • elements and pseudo-classes is significant as it is a descendant
  • combinator. ‘E :pseudo’ should parse the same as ‘E *:pseudo’, not
  • ‘E:pseudo’. Patch by Simon Sapin.
    • lxml.html.diff no longer raises an exception when hitting ‘img’ tags
  • without ‘src’ attribute.
    [2.3.2-1]
  • 2.3.2 (2011-11-11)
  • Features added
    • lxml.objectify.deannotate() has a new boolean option
  • cleanup_namespaces to remove the objectify namespace declarations
    
  • (and generally clean up the namespace declarations) after removing
    
  • the type annotations.
    
    • lxml.objectify gained its own SubElement() function as a copy of
  • etree.SubElement to avoid an otherwise redundant import of
    
  • lxml.etree on the user side.
    
  • Bugs fixed
    • Fixed the ‘descendant’ bug in cssselect a second time (after a first
  •  fix in lxml 2.3.1). The previous change resulted in a serious
    
  •  performance regression for the XPath based evaluation of the
    
  •  translated expression. Note that this breaks the usage of some
    
  •  of the generated XPath expressions as XSLT location paths that
    
  •  previously worked in 2.3.1.
    
    • Fixed parsing of some selectors in cssselect. Whitespace after
  •  combinators '>', '+' and '~' is now correctly ignored. Previously
    
  •  it was parsed as a descendant combinator. For example, 'div> .foo'
    
  •  was parsed the same as 'div>* .foo' instead of 'div>.foo'. Patch by
    
  •  Simon Sapin.
    

[2.3.1-1]

  • Features added

    • New option kill_tags in lxml.html.clean to remove specific
  • tags and their content (i.e. their whole subtree).
    • pi.get() and pi.attrib on processing instructions to parse
  • pseudo-attributes from the text content of processing instructions.
    • lxml.get_include() returns a list of include paths that can be
  • used to compile external C code against lxml.etree. This is
  • specifically required for statically linked lxml builds when code
  • needs to compile against the exact same header file versions as lxml
  • itself.
    • Resolver.resolve_file() takes an additional option
  • close_file that configures if the file(-like) object will be
  • closed after reading or not. By default, the file will be closed,
  • as the user is not expected to keep a reference to it.
  • Bugs fixed

    • HTML cleaning didn’t remove ‘data:’ links.
    • The html5lib parser integration now uses the ‘official’
  • implementation in html5lib itself, which makes it work with newer
  • releases of the library.
    • In lxml.sax, endElementNS() could incorrectly reject a plain
  • tag name when the corresponding start event inferred the same plain
  • tag name to be in the default namespace.
    • When an open file-like object is passed into parse() or
  • iterparse(), the parser will no longer close it after use. This
  • reverts a change in lxml 2.3 where all files would be closed. It is
  • the users responsibility to properly close the file(-like) object,
  • also in error cases.
    • Assertion error in lxml.html.cleaner when discarding top-level elements.
    • In lxml.cssselect, use the xpath ‘A//B’ (short for
  • ‘A/descendant-or-self::node()/B’) instead of ‘A/descendant::B’ for the
  • css descendant selector (‘A B’). This makes a few edge cases to be
  • consistent with the selector behavior in WebKit and Firefox, and makes
  • more css expressions valid location paths (for use in xsl:template
  • match).
  • [tags no longer show up in the
  • collected form values.
  • [values to/from a multiple select form
  • field properly selects them and unselects them.
  • Other changes

    • Static builds can specify the download directory with the
  • –download-dir option.
    [2.3-1]
  • 2.3 (2011-02-06)
  • ================
  • Features added

    • When looking for children, lxml.objectify takes ‘{}tag’ as
  • meaning an empty namespace, as opposed to the parent namespace.
  • Bugs fixed

    • When finished reading from a file-like object, the parser
  • immediately calls its .close() method.
    • When finished parsing, iterparse() immediately closes the input
  • file.
    • Work-around for libxml2 bug that can leave the HTML parser in a
  • non-functional state after parsing a severly broken document (fixed
  • in libxml2 2.7.8).
    • marque tag in HTML cleanup code is correctly named marquee.
  • Other changes

    • Some public functions in the Cython-level C-API have more explicit
  • return types.
  • 2.3beta1 (2010-09-06)
  • =====================
  • Features added

  • Bugs fixed

    • Crash in newer libxml2 versions when moving elements between
  • documents that had attributes on replaced XInclude nodes.
    • XMLID() function was missing the optional parser and
  • base_url parameters.
    • Searching for wildcard tags in iterparse() was broken in Py3.
    • lxml.html.open_in_browser() didn’t work in Python 3 due to the
  • use of os.tempnam. It now takes an optional ‘encoding’ parameter.
  • Other changes

  • 2.3alpha2 (2010-07-24)
  • ======================
  • Features added

  • Bugs fixed

    • Crash in XSLT when generating text-only result documents with a
  • stylesheet created in a different thread.
  • Other changes

    • repr() of Element objects shows the hex ID with leading 0x
  • (following ElementTree 1.3).
  • 2.3alpha1 (2010-06-19)
  • ======================
  • Features added

    • Keyword argument namespaces in lxml.cssselect.CSSSelector()
  • to pass a prefix-to-namespace mapping for the selector.
    • New function lxml.etree.register_namespace(prefix, uri) that
  • globally registers a namespace prefix for a namespace that newly
  • created Elements in that namespace will use automatically. Follows
  • ElementTree 1.3.
    • Support ‘unicode’ string name as encoding parameter in
  • tostring(), following ElementTree 1.3.
    • Support ‘c14n’ serialisation method in ElementTree.write() and
  • tostring(), following ElementTree 1.3.
    • The ElementPath expression syntax (el.find*()) was extended to
  • match the upcoming ElementTree 1.3 that will ship in the standard
  • library of Python 3.2/2.7. This includes extended support for
  • predicates as well as namespace prefixes (as known from XPath).
    • During regular XPath evaluation, various ESXLT functions are
  • available within their namespace when using libxslt 1.1.26 or later.
    • Support passing a readily configured logger instance into
  • PyErrorLog, instead of a logger name.
    • On serialisation, the new doctype parameter can be used to
  • override the DOCTYPE (internal subset) of the document.
    • New parameter output_parent to XSLTExtension.apply_templates()
  • to append the resulting content directly to an output element.
    • XSLTExtension.process_children() to process the content of the
  • XSLT extension element itself.
    • ISO-Schematron support based on the de-facto Schematron reference
  • ‘skeleton implementation’.
    • XSLT objects now take XPath object as call stylesheet
  • parameters.
    • Enable path caching in ElementPath (el.find*()) to avoid parsing
  • overhead.
    • Setting the value of a namespaced attribute always uses a prefixed
  • namespace instead of the default namespace even if both declare the
  • same namespace URI. This avoids serialisation problems when an
  • attribute from a default namespace is set on an element from a
  • different namespace.
    • XSLT extension elements: support for XSLT context nodes other than
  • elements: document root, comments, processing instructions.
    • Support for strings (in addition to Elements) in node-sets returned
  • by extension functions.
    • Forms that lack an action attribute default to the base URL of
  • the document on submit.
    • XPath attribute result strings have an attrname property.
    • Namespace URIs get validated against RFC 3986 at the API level
  • (required by the XML namespace specification).
    • Target parsers show their target object in the .target property
  • (compatible with ElementTree).
  • Bugs fixed

    • API is hardened against invalid proxy instances to prevent crashes
  • due to incorrectly instantiated Element instances.
    • Prevent crash when instantiating CommentBase and friends.
    • Export ElementTree compatible XML parser class as
  • XMLTreeBuilder, as it is called in ET 1.2.
    • ObjectifiedDataElements in lxml.objectify were not hashable. They
  • now use the hash value of the underlying Python value (string,
  • number, etc.) to which they compare equal.
    • Parsing broken fragments in lxml.html could fail if the fragment
  • contained an orphaned closing ’

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

66.3%