Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2024-2985
HistoryMay 24, 2024 - 12:00 a.m.

python39:3.9 and python39-devel:3.9 security update

2024-05-2400:00:00
linux.oracle.com
4
security update
python 3.9
mod_wsgi

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

6.7 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.5%

JSON

mod_wsgi
[4.7.1-7]

  • Bump release for rebuild
    Resolves: rhbz#2213595
    [4.7.1-6]
  • Remove rpath
    Resolves: rhbz#2213837
    [4.7.1-5]
  • Core dumped upon file upload >= 1GB
    Resolves: rhbz#2125172
    [4.7.1-4]
  • Convert from Fedora to the python39 module in RHEL8
  • Resolves: rhbz#1877430
    [4.7.1-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
    [4.7.1-2]
  • Rebuilt for Python 3.9
    [4.7.1-1]
  • update to 4.7.1 (#1721376)
    [4.6.8-3]
  • Use make_build macro instead of just make
  • https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    [4.6.8-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
    [4.6.8-1]
  • update to 4.6.8 (#1721376)
    [4.6.6-6]
  • try again to drop Python 2
    [4.6.6-5]
  • drop python2 build
    [4.6.6-4]
  • Rebuilt for Python 3.8.0rc1 (#1748018)
    [4.6.6-3]
  • Rebuilt for Python 3.8
    [4.6.6-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
    [4.6.6-1]
  • update to 4.6.6 (rhbz#1718151)
    [4.6.5-1]
  • update to 4.6.5
    [4.6.4-4]
  • only build docs with Python 3
  • fix build on Fedora>30 and RHEL 7
    [4.6.4-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
    [4.6.4-2]
  • Run Python 3 build in a subdir, so module isn’t linked against both
    libpython 2 and libpython 3 (rhbz#1609491)
    [4.6.4-1]
  • update to 4.6.4 (rhbz#1560329)
    [4.6.2-5]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
    [4.6.2-4]
  • Rebuilt for Python 3.7
    [4.6.2-3]
  • use sphinx-build-3 if python2 support is disabled
    [4.6.2-2]
  • Update conditionals.
  • Make preperations for non-python2 builds
    [4.6.2-1]
  • update to 4.6.2 (rhbz#1514768)
  • add gcc BR
    [4.5.20-4]
  • restrict module DSO symbol exports
    [4.5.20-3]
  • Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
    [4.5.20-2]
  • Python 2 binary package renamed to python2-mod_wsgi
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
    [4.5.20-1]
  • update to 4.5.20
    [4.5.15-5]
  • include mod_wsgi Python package and mod_wsgi-express script
    [4.5.15-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
    [4.5.15-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
    [4.5.15-2]
  • Rebuild due to bug in RPM (RHBZ #1468476)
    [4.5.15-1]
  • update to 4.5.15 (#1431893)
    [4.5.13-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
    [4.5.13-1]
  • Update to 4.5.13
    [4.5.9-2]
  • Rebuild for Python 3.6
    [4.5.9-1]
  • upgrade to 4.5.9 (rhbz#1180445)
    [4.4.8-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
    [4.4.8-3]
  • Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5
    [4.4.8-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
    [4.4.8-1]
  • Upstream to 4.4.8.
  • This version includes the fix for the segfault described in RHBZ#1178851.
    [4.4.3-1]
  • update to new upstream version 4.4.3 (#1176914)
    [4.4.1-1]
  • update to new upstream version 4.4.1 (#1170994)
    [4.3.2-1]
  • update to new upstream version 4.3.2 (#1104526)
    [3.5-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
    [3.5-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
    [3.5-1]
  • Update to 3.5 to fix CVE-2014-0240 (#1101863)
  • Remove all of the patches, which have been applied upstream
  • Update source URL for new the GitHub upstream
    [3.4-14]
  • rebuild for Python 3.4
    [3.4.13]
  • do not use conflicts between mod_wsgi packages (rhbz#1087943)
    [3.4-12]
  • fix _httpd_mmn expansion in absence of httpd-devel
    [3.4-11]
  • added python3 subpackage (thanks to Jakub Dornak), rhbz#1035876
    [3.4-10]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
    [3.4-9]
  • modernize spec file (thanks to rcollet)
    [3.4-8]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
    [3.4-7]
  • compile with -fno-strict-aliasing to workaround Python
    bug http://www.python.org/dev/peps/pep-3123/
    [3.4-6]
  • use _httpd_moddir macro
    [3.4-5]
  • spec file cleanups
    [3.4-4]
  • enable PR_SET_DUMPABLE in daemon process to enable core dumps
    [3.4-3]
  • use a NULL c->sbh pointer with httpd 2.4 (possible fix for #867276)
  • add logging for unexpected daemon process loss
    [3.4-2]
  • also use RPM_LD_FLAGS for build bz. #867137
    [3.4-1]
  • update to upstream release 3.4
    [3.3-7]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
    [3.3-6]
  • add possible fix for daemon mode crash (#831701)
    [3.3-5]
  • move wsgi.conf to conf.modules.d
    [3.3-4]
  • rebuild for httpd 2.4
    [3.3-3]
  • prepare for httpd 2.4.x
    [3.3-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
    [3.3-1]
  • update to 3.3
    [3.2-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
    [3.2-2]
  • Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
    [3.2-1]
  • update to 3.2
    [3.1-2]
  • removed conflicts as it violates fedora packaging policy
    [3.1-1]
  • update to 3.1
  • add explicit enable-shared
  • add conflicts mod_python < 3.3.1
    [2.5-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
    [2.5-1]
  • Update to 2.5
    [2.3-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
    [2.3-2]
  • Rebuild for Python 2.6
    [2.3-1]
  • Update to 2.3
    [2.1-2]
  • Remove requires on httpd-devel
    [2.1-1]
  • Update to 2.1
    [1.3-4]
  • Build against the shared python lib.
    [1.3-3]
  • Autorebuild for GCC 4.3
    [1.3-2]
  • Require httpd
    [1.3-1]
  • Update to 1.3
    [1.0-1]
  • Initial packaging for Fedora
    numpy
    [1.19.4-3]
  • Adjusted the postun scriptlets to enable upgrading to RHEL 9
  • Resolves: rhbz#1933055
    [1.19.4-2]
  • Convert from Fedora to the python39 module in RHEL8
  • Resolves: rhbz#1877430
    [1:1.19.4-1]
  • 1.19.4
    [1:1.19.3-1]
  • 1.19.3
    [1:1.19.2-2]
  • Make test suite work in FIPS (140-2) Mode
    [1:1.19.2-1]
  • 1.19.2
    [1:1.19.1-3]
  • https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager
    [1:1.19.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
    [1:1.19.1-1]
  • 1.19.1
    [1:1.19.0-2]
  • Assume old-style numpy provides from python2-numpy
    [1:1.19.0-1]
  • 1.19.0 final.
    [1:1.19.0-0.rc2]
  • 1.19.0 rc2
    [1:1.18.4-3]
  • Rebuilt for Python 3.9
    [1:1.18.4-2]
  • Own pycache dir, 1833392
    [1:1.18.4-1]
  • 1.18.4
    [1:1.18.3-1]
  • 1.18.3
    [1:1.18.2-1]
  • 1.18.2
    [1:1.18.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
    [1:1.18.1-1]
  • 1.18.1
    [1:1.18.0-1]
  • 1.18.0
    [1:1.17.4-2]
  • Backport patch for s390x failures
  • Enable non-broken tests on ppc64le
    [1:1.17.4-1]
  • 1.17.4
    [1:1.17.3-1]
  • 1.17.3
    [1:1.17.2-1]
  • 1.17.2
    [1:1.17.1-1]
  • 1.17.1
    [1:1.17.0-3]
  • Rebuilt for Python 3.8
    [1:1.17.0-2]
  • Reintroduce libnpymath.a (#1735674)
    [1:1.17.0-1]
  • 1.17.0, split out Python 2.
    [1:1.16.4-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
    [1:1.16.4-2]
  • Avoid hardcoding /usr prefix
    [1:1.16.4-1]
  • 1.16.4
    [1:1.16.3-2]
  • Build only with openblasp (bugz#1709161)
    [1:1.16.3-1]
  • 1.16.3.
    [1:1.16.2-1]
  • 1.16.2.
    [1:1.16.1-1]
  • 1.16.1.
    [1:1.16.0-1]
  • 1.16.0.
    [1:1.15.1-2]
  • Switch to pytest for running tests during check
  • Stop ignoring failures when running tests
  • Set PATH in check so that f2py tests work
  • Update docs to match release
  • Remove outdated workaround from rhbz#849713
    [1:1.15.1-1]
  • Update to latest version
    [1:1.15.0-2]
  • Fix broken build on s390x
  • Remove bytecode produced by pytest
  • Re-enable tests on s390x
    [1:1.15.0-1]
  • 1.15.0
    [1:1.14.5-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
    [1:1.14.5-2]
  • Rebuilt for Python 3.7
    [1:1.14.5-1]
  • 1.14.5
    [1:1.14.3-1]
  • 1.14.3
    [1:1.14.2-1]
  • 1.14.2
    [1:1.14.1-1]
  • 1.14.1
    [1:1.14.0-0.rc1.1]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
    [1:1.14.0-0.rc1]
  • 1.14.0 rc1
    [1:1.13.3-5]
  • Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
    [1:1.13.3-4]
  • Split out doc subpackage.
    [1:1.13.3-3]
  • Cleanup spec file conditionals
    [1:1.13.3-2]
  • set proper environment variables for openblas
    [1:1.13.3-1]
  • 1.13.3
    [1:1.13.2-1]
  • 1.13.2
    [1:1.13.1-4]
  • Use openblas where available, BZ 1472318.
    [1:1.13.1-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
    [1:1.13.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
    [1:1.13.1-1]
  • 1.13.1 final
    [1:1.13.0-1]
  • 1.13.0 final
    [1:1.13.0-0.rc2]
  • 1.13.0 rc2
    [1:1.13.0-0.rc1]
  • 1.13.0 rc1
    [1:1.12.1-1]
  • 1.12.1
    [1:1.12.0-1]
  • Update to 1.12.0, build with gcc 7.0.
    [1:1.11.2-2]
  • Rebuild for Python 3.6
    [1:1.11.2-1]
  • Update to 1.11.2 final
    [1:1.11.2-0.rc1]
  • Update to 1.11.2rc1, BZ 1340440.
    [1:1.11.1-2]
  • https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
    [1:1.11.1-1]
  • Update to 1.11.1 final
    [1:1.11.1-0.rc1]
  • Update to 1.11.1rc1, BZ 1340440.
    [1:1.11.0-4]
  • Update to 1.11.0 final
    [1:1.11.0-3.rc2]
  • Update to 1.11.0rc2
    [1:1.11.0-2.b3]
  • Bump Release. 1b2 is higher than 0b3
    [1:1.11.0-0.b3]
  • Update to 1.11.0b2, BZ 1306249.
    [1:1.11.0-1b2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
    [1:1.11.0-0.b2]
  • Update to 1.11.0b2, BZ 1303387.
    [1:1.11.0-020161016.cc2b04git]
  • Update to git snapshot (due to build issue) after 1.11.0b1, BZ 1301943.
    [1:1.10.4-1]
  • Update to 1.10.4, BZ 1296509.
    [1:1.10.2-1]
  • Update to 1.10.2, BZ 1291674.
    [1:1.10.2-0.2.rc2]
  • Update to 1.10.2rc1, BZ 1289550.
    [1:1.10.2-0.1.rc1]
  • Update to 1.10.2rc1
  • Drop opt-flags patch applied upstream
    [1:1.10.1-6]
  • Add provides to satisfy numpy%{_isa} requires in other packages
    [1:1.10.1-5]
  • Re-add provides f2py
    [1:1.10.1-4]
  • Fix obsoletes / provides for numpy -> python2-numpy rename
    [1:1.10.1-3]
  • Remove fortran flags or arm would build with -march=x86-64
    [1:1.10.1-2]
  • Provide python2-* packages
  • Run tests with verbose=2
    [1:1.10.1-1]
  • Update to 1.10.1, BZ 1271022.
    [1:1.10.0-2]
  • Rebuilt for Python3.5 rebuild
    [1:1.10.0-1]
  • Update to 1.10.0 final.
    [1:1.10.0-0.b1]
  • Update to 1.10.0b1, BZ 1252641.
    [1:1.9.2-3]
  • Add python2-numpy provides (bug #1249423)
  • Spec cleanup
    [1:1.9.2-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
    [1:1.9.2-1]
  • Update to 1.9.2
    [1:1.9.1-2]
  • Add upstream patch to fix xerbla linkage (bug #1172834)
    [1:1.9.1-1]
  • Update to 1.9.1, BZ 1160273.
    [1:1.9.0-1]
  • Update to 1.9.0
    [1:1.9.0-0.1.rc1]
  • Update to 1.9.0rc1
    [1:1.8.2-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
    [1:1.8.2-1]
  • Update to 1.8.2
    [1:1.8.1-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
    [1:1.8.1-3]
  • Rebuild for Python 3.4
    [1:1.8.1-2]
  • Fixing FTBFS on ppc64le (#1078354)
    [1:1.8.1-1]
  • Update to 1.8.1
    [1:1.8.0-5]
  • Fix pycache ownership (bug #1072467)
    [1:1.8.0-4]
  • Fix CVE-2014-1858, CVE-2014-1859: #1062009, #1062359
    [1:1.8.0-3]
  • Ship doc module (bug #1034357)
    [1:1.8.0-2]
  • Move f2py documentation to f2py package (bug #1027394)
    [1:1.8.0-1]
  • Update to 1.8.0 final
    [1:1.8.0-0.7.rc2]
  • Update to 1.8.0rc2
  • Create clean site.cfg
  • Use serial atlas
    [1:1.8.0-0.6.b2]
  • Add [atlas] to site.cfg for new atlas library names
    [1:1.8.0-0.5.b2]
  • Update site.cfg for new atlas library names
    [1:1.8.0-0.4.b2]
  • rebuild for atlas 3.10
    [1:1.8.0-0.3.b2]
  • Fix libdir path in site.cfg, BZ 1006242.
    [1:1.8.0-0.2.b2]
  • Update to 1.8.0b2
    [1:1.8.0-0.1.b1]
  • Update to 1.8.0b1
  • Drop f2py patch applied upstream
    [1:1.7.1-5]
  • URL Fix, BZ 1001337
    [1:1.7.1-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
    [1:1.7.1-3]
  • Fix rpmlint warnings
  • Update License
  • Apply patch: change shebang of f2py to use binary directly
    [1:1.7.1-2]
  • Specfile cleanup (bug #969854)
    [1:1.7.1-1]
  • Update to 1.7.1
    [1:1.7.0-1]
  • Update to 1.7.0 final
    [1:1.7.0-0.5.rc1]
  • Update to 1.7.0rc1
    [1:1.7.0-0.4.b2]
  • Update to 1.7.0b2
  • Drop patches applied upstream
    [1:1.7.0-0.3.b1]
  • Add patch from github pull 371 to fix python 3.3 pickle issue
  • Remove cython .c source regeneration - fails now
    [1:1.7.0-0.2.b1]
  • add workaround for rhbz#849713 (fixes FTBFS)
    [1:1.7.0-0.1.b1]
  • Update to 1.7.0b1
  • Rebase python 3.3 patchs to current git master
  • Drop patches applied upstream
    [1:1.6.2-5]
  • rework patches for 3.3 to more directly reflect upstream’s commits
  • re-enable test suite on python 3
  • forcibly regenerate Cython .c source to avoid import issues on Python 3.3
    [1:1.6.2-4]
  • rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
  • needs unicode patch
    [1:1.6.2-3]
  • remove rhel logic from with_python3 conditional
    [1:1.6.2-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
    [1:1.6.2-1]
  • Update to 1.6.2 final
    [1:1.6.2rc1-0.1]
  • Update to 1.6.2rc1
    [1:1.6.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
    [1:1.6.1-1]
  • Update to 1.6.1
    [1:1.6.0-2]
  • Bump and rebuild for BZ 712251.
    [1:1.6.0-1]
  • Update to 1.6.0 final
    [1:1.6.0-0.2.b2]
  • Update to 1.6.0b2
  • Drop import patch fixed upstream
    [1:1.6.0-0.1.b1]
  • Update to 1.6.0b1
  • Build python3 module with python3
  • Add patch from upstream to fix build time import error
    [1:1.5.1-1]
  • Update to 1.5.1 final
    [1:1.5.1-0.4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
    [1:1.5.1-0.3]
  • fix the AttributeError during tests
  • fix build on s390(x)
    [1:1.5.1-0.2]
  • rebuild for newer python3
    [1:1.5.1-0.1]
  • update to 1.5.1rc1
  • add python3 subpackage
  • some spec-cleanups
    [1:1.4.1-6]
  • actually add the patch this time
    [1:1.4.1-5]
  • fix segfault within %check on 2.7 (patch 2)
    [1:1.4.1-4]
  • Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
    [1.4.1-3]
  • ignore the ‘Ticket #1299 second test’ failure on s390(x)
    [1.4.1-2]
  • source commit fix
    [1.4.1-1]
  • New upstream release. Include backported doublefree patch
    [1.3.0-8]
  • Moved distutils back to the main package, BZ 572820.
    [1.3.0-7]
  • Reverted to 1.3.0 after upstream pulled 1.4.0, BZ 579065.
    [1.4.0-5]
  • Linking /usr/include/numpy to .h files, BZ 185079.
    [1.4.0-4]
  • Re-enabling atlas BR, dropping lapack Requires.
    [1.4.0-3]
  • Since the previous didn’t work, Requiring lapack.
    [1.4.0-2]
  • Temporarily dropping atlas BR to work around 562577.
    [1.4.0-1]
  • 1.4.0.
  • Dropped ARM patch, ARM support added upstream.
    [1.3.0-6.fa1]
  • Add ARM support
    [1.3.0-6]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
    [1.3.0-5]
  • Fixed atlas BR, BZ 505376.
    [1.3.0-4]
  • EVR bump for pygame chainbuild.
    [1.3.0-3]
  • Moved linalg, fft back to main package.
    [1.3.0-2]
  • Split out f2py into subpackage, thanks Peter Robinson [email protected].
    [1.3.0-1]
  • Update to latest upstream.
  • Fixed Source0 URL.
    [1.3.0-0.rc1]
  • Update to latest upstream.
    [1.2.1-3]
  • Require python-devel, BZ 488464.
    [1.2.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
    [1.2.1-1]
  • Update to 1.2.1.
    [1.2.0-2]
  • Rebuild for Python 2.6
    [1.2.0-1]
  • New upstream release, added python-nose BR. BZ 465999.
  • Using atlas blas, not blas-devel. BZ 461472.
    [1.1.1-1]
  • New upstream release
    [1.1.0-1]
  • New upstream release
    [1.0.4-1]
  • New upstream release
    [1.0.3.1-2]
  • Add python egg to %files on f9+
    [1.0.3.1-1]
  • New upstream release
    [1.0.3-1]
  • New upstream release
    [1.0.2-2]
  • Drop BR: atlas-devel, since it just provides binary-compat
    blas and lapack libs. Atlas can still be optionally used
    at runtime. (Note: this is all per the atlas maintainer).
    [1.0.2-1]
  • New upstream release
    [1.0.1-4]
  • Update gfortran patch to recognize latest gfortran f95 support
  • Resolves rhbz#236444
    [1.0.1-3]
  • Fix up cpuinfo bug (#229753). Upstream bug/change:
    http://projects.scipy.org/scipy/scipy/ticket/349
    [1.0.1-2]
  • Per discussion w/Jose Matos, Obsolete/Provide f2py, as the
    stand-alone one is no longer supported/maintained upstream
    [1.0.1-1]
  • New upstream release
    [1.0-2]
  • Rebuild for python 2.5
    [1.0-1]
  • New upstream release
    [0.9.8-1]
  • New upstream release
    [0.9.6-1]
  • Upstream update
    [0.9.5-1]
  • Upstream update
    [0.9.4-2]
  • Rebuild for Fedora Extras 5
    [0.9.4-1]
  • Initial RPM release
  • Added gfortran patch from Neal Becker
    python39
    [3.9.18-3]
  • Skip tests failing on s390x
    Resolves: RHEL-21905
    [3.9.18-2]
  • Security fix for CVE-2023-27043
    Resolves: RHEL-5561
    python3x-pip
    [20.2.4-9]
  • Require Python with tarfile filters
    Resolves: RHEL-25457
    python3x-setuptools
    [50.3.2-5]
  • Fix for CVE-2022-40897
    Resolves: RHEL-9764
    [50.3.2-4]
  • Adjusted the postun scriptlets to enable upgrading to RHEL 9
  • Resolves: rhbz#1933055
    [50.3.2-3]
  • Convert from Fedora to the python39 module in RHEL8
  • Resolves: rhbz#1877430
    [50.3.2-2]
  • Disable tests in Fedora ELN (and RHEL)
    [50.3.2-1]
  • Update to 50.3.2 (#1889093)
    [50.1.0-1]
  • Update to 50.1.0 (#1873889)
    [49.6.0-1]
  • Update to 49.6.0 (#1862791)
    [49.1.3-1]
  • Update to 49.1.3 (#1853597)
  • https://setuptools.readthedocs.io/en/latest/history.html#v49-1-3
    [47.3.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
    [47.3.1-1]
  • Update to 47.3.1 (#1847049)
  • https://setuptools.readthedocs.io/en/latest/history.html#v47-3-1
    [47.1.1-1]
  • Update to 47.1.1 (#1841123)
  • https://setuptools.readthedocs.io/en/latest/history.html#v47-1-1
    [46.4.0-4]
  • Rebuilt for Python 3.9
    [46.4.0-3]
  • Bootstrap for Python 3.9
    [46.4.0-2]
  • Bootstrap for Python 3.9
    [46.4.0-1]
  • Update to 46.4.0 (#1835411)
  • https://setuptools.readthedocs.io/en/latest/history.html#v46-4-0
    [46.2.0-1]
  • Update to 46.2.0 (#1833826)
  • https://setuptools.readthedocs.io/en/latest/history.html#v46-2-0
    [46.1.3-1]
  • Upgrade to 46.1.3 (#1817189)
  • https://setuptools.readthedocs.io/en/latest/history.html#v46-1-3
    [46.0.0-1]
  • Upgrade to 46.0.0 (#1811340)
  • https://setuptools.readthedocs.io/en/latest/history.html#v46-0-0
    [45.2.0-1]
  • Upgrade to 45.2.0 (#1775943)
  • https://setuptools.readthedocs.io/en/latest/history.html#v45-2-0
  • No longer supports Python 2
    [41.6.0-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
    [41.6.0-1]
  • Upgrade to 41.6.0 (#1758945).
  • https://setuptools.readthedocs.io/en/latest/history.html#v41-6-0
  • Disabled a failing upstream test: https://github.com/pypa/setuptools/issues/1896
    [41.2.0-1]
  • Upgrade to 41.2.0 (#1742718).
  • https://setuptools.readthedocs.io/en/latest/history.html#v41-2-0
    [41.0.1-9]
  • Move python2-setuptools to a separate package
    [41.0.1-8]
  • Rebuilt for Python 3.8
    [41.0.1-7]
  • Bootstrap for Python 3.8
    [41.0.1-6]
  • Provide pythonXdist(setuptools) when bootstrapping
    [41.0.1-5]
  • Bootstrap for Python 3.8
    [41.0.1-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
    [41.0.1-3]
  • Make /usr/bin/easy_install Python 3
  • Drop obsoleted Obsoletes
    [41.0.1-2]
  • Remove optional test dependencies for Python 2
  • Skip test_virtualenv on Python 2
    [41.0.1-1]
  • Update to 41.0.1 (#1695846)
  • https://github.com/pypa/setuptools/blob/v41.0.1/CHANGES.rst
    [40.8.0-1]
  • Update to 40.8.0 (#1672756)
  • https://github.com/pypa/setuptools/blob/v40.8.0/CHANGES.rst
    [40.7.3-1]
  • Hotfix update to 40.7.3 (#1672084)
  • https://github.com/pypa/setuptools/blob/v40.7.3/CHANGES.rst
    [40.7.2-1]
  • Hotfix update to 40.7.2 (#1671608)
  • https://github.com/pypa/setuptools/blob/v40.7.2/CHANGES.rst
    [40.7.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
    [40.7.1-1]
  • Hotfix update to 40.7.1 (#1670243)
  • https://github.com/pypa/setuptools/blob/v40.7.1/CHANGES.rst
    [40.7.0-1]
  • Update to 40.7.0 (#1669876)
  • https://github.com/pypa/setuptools/blob/v40.7.0/CHANGES.rst
    [40.4.3-1]
  • Update to 40.4.3 to fix dire DeprecationWarnings (#1627071)
  • List vendored libraries
  • https://github.com/pypa/setuptools/blob/v40.4.3/CHANGES.rst
    [40.4.1-1]
  • Update to 40.4.1 (#1599307).
  • https://github.com/pypa/setuptools/blob/v40.4.1/CHANGES.rst
    [39.2.0-7]
  • Add a subpackage with wheels
  • Remove the python3 bcond
  • Remove macros for RHEL 6
    [39.2.0-6]
  • Create /usr/local/lib/pythonX.Y when needed (#1576924)
    [39.2.0-5]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
    [39.2.0-4]
  • Rebuilt for Python 3.7
    [39.2.0-3]
  • Bootstrap for Python 3.7
    [39.2.0-2]
  • Bootstrap for Python 3.7
    [39.2.0-1]
  • update to 39.2.0 Fixes bug #1572889
    [39.0.1-1]
  • update to 39.0.1 Fixes bug #1531527
    [38.4.0-4]
  • Skip test_virtualenv due to broken executable detection
    [38.4.0-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
    [38.4.0-2]
  • Update conditional
    [38.4.0-1]
  • update to 38.4.0 Fixes bug #1531527
    [38.2.5-1]
  • update to 38.2.5 Fixes bug #1528968
    [37.0.0-1]
  • Update to 37.0.0 (fixes #1474126)
  • Removed not needed pip3 patch (upstream included different version of fix)
    [36.5.0-1]
  • Update to 36.5.0 (related to #1474126)
    [36.2.0-8]
  • Remove the platform-python subpackage
    [36.2.0-7]
  • Re-enable tests to finish bootstrapping the platform-python stack
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)
    [36.2.0-6]
  • Add the platform-python subpackage
  • Disable tests so platform-python stack can be bootstrapped
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)
    [36.2.0-5]
  • Add Patch 0 that fixes a test suite failure on Python 3 in absence of
    the Python 2 version of pip
  • Move docs to their proper place
    [36.2.0-4]
  • Switch macros to bcond’s and make Python 2 optional to facilitate building
    the Python 2 and Python 3 modules.
    [36.2.0-3]
  • Revert ‘Add --executable option to easy_install command’
    This enhancement is currently not needed and it can possibly
    collide with pip --editableoption
    [36.2.0-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
    [36.2.0-1]
  • update to 36.2.0. Fixes bug #1470908
    [36.0.1-1]
  • update to 36.0.1. Fixes bug #1458093
    [35.0.2-1]
  • update to 35.0.2. Fixes bug #1446622
    [35.0.1-1]
  • Update to 35.0.1. Fixes bug #1440388
    [34.3.2-1]
  • Update to 34.3.2. Fixes bug #1428818
    [34.3.0-1]
  • Update to 34.3.0. Fixes bug #1426463
    [34.2.0-2]
  • Add --executable option to easy_install command
    [34.2.0-1]
  • Update to 34.2.0. Fixes bug #1421676
    [34.1.1-1]
  • Update to 34.1.1. Fixes bug #1412268
  • Fix License tag. Fixes bug #1412268
  • Add Requires for fomerly bundled projects: six, packaging appdirs
    [32.3.1-2]
  • Use python macros in build and install sections
    [32.3.1-1]
  • Update to 32.3.1. Fixes bug #1409091
    [32.3.0-1]
  • Update to 32.3.0. Fixes bug #1408564
    [32.2.0-1]
  • Update to 32.2.0. Fixes bug #1400310
    [30.4.0-2]
  • Enable tests
    [30.4.0-1]
  • Update to 30.4.0. Fixes bug #1400310
    [28.8.0-3]
  • Rebuild for Python 3.6 with wheel
  • Disable tests
    [28.8.0-2]
  • Rebuild for Python 3.6 without wheel
    [28.8.0-1]
  • Update to 28.8.1. Fixes bug #1392722
    [28.7.1-1]
  • Update to 28.7.1. Fixes bug #1389917
    [28.6.1-1]
  • Update to 28.6.1. Fixes bug #1387071
    [28.6.0-1]
  • Update to 28.6.0. Fixes bug #1385655
    [28.3.0-1]
  • Update to 28.3.0. Fixes bug #1382971
    [28.2.0-1]
  • Update to 28.2.0. Fixes bug #1381099
    [28.1.0-1]
  • Update to 28.1.0. Fixes bug #1381066
    [28.0.0-1]
  • Update to 28.0.0. Fixes bug #1380073
    [27.3.0-1]
  • Update to 27.3.0. Fixes bug #1378067
    [27.2.0-1]
  • Update to 27.2.0. Fixes bug #1376298
    [27.1.2-1]
  • Update to 27.1.2. Fixes bug #1370777
    [26.0.0-1]
  • Update to 26.0.0. Fixes bug #1370777
    [25.1.6-1]
  • Update to 25.1.6. Fixes bug #1362325
    [25.1.1-1]
  • Update to 25.1.1. Fixes bug #1361465
    [25.1.0-1]
  • Update to 25.1.0
    [25.0.0-1]
  • Update to 25.0.0
    [24.2.0-1]
  • Update to 24.2.0. Fixes bug #1352734
    [24.0.1-2]
  • https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
    [24.0.1-1]
  • Update to 24.0.1. Fixes bug #1352532
    [23.0.0-1]
  • Update to 23.0.0. Fixes bug #1346542
    [22.0.5-1]
  • Update to 22.0.5. Fixes bug #1342706
    [20.0.0-1]
  • Upgrade to 22.0.0
  • Tue May 31 2016 Nils Philippsen
    • Prevent tree cycle creation when adding Elements as siblings.
    • LP#1361948: crash when deallocating Element siblings without parent.
    • LP#1354652: crash when traversing internally loaded documents in XSLT
  • extension functions.
  • Sun Aug 17 2014 Fedora Release Engineering
    • HTML cleaning could fail to strip javascript links that mix control
  • characters into the link scheme.
    [3.3.4-1]
  • 3.3.4 (2014-04-03)
  • ==================
  • Features added
    • Source line numbers above 65535 are available on Elements when
  • using libxml2 2.9 or later.
  • Bugs fixed
    • lxml.html.fragment_fromstring() failed for bytes input in Py3.
      [3.3.3-4]
  • Fix macro definition
    [3.3.3-3]
  • Add python3-cssselect to correct package
    [3.3.3-3]
  • python3-cssselect is not available on F19
    [3.3.3-2]
  • BZ#1075070 add requires and buildrequires for cssselect
    [3.3.3-1]
  • 3.3.3 (2014-03-04)
  • ==================
  • Bugs fixed
    • LP#1287118: Crash when using Element subtypes with slots.
  • Other changes
    • The internal classes _LogEntry and _Attrib can no longer be
  • subclassed from Python code.
    [3.3.2-2]
  • Add check section #1075070
    [3.3.2-1]
  • 3.3.2 (2014-02-26)
  • ==================
  • Bugs fixed
    • The properties resolvers and version, as well as the methods
  • set_element_class_lookup() and makeelement(), were lost from
  • iterparse objects.
    • LP#1222132: instances of XMLSchema, Schematron and RelaxNG
  • did not clear their local error_log before running a validation.
    • LP#1238500: lxml.doctestcompare mixed up ‘expected’ and ‘actual’ in
  • attribute values.
    • Some file I/O tests were failing in MS-Windows due to incorrect temp
  • file usage. Initial patch by Gabi Davar.
    • LP#910014: duplicate IDs in a document were not reported by DTD
  • validation.
    • LP#1185332: tostring(method=‘html’) did not use HTML serialisation
  • semantics for trailing tail text. Initial patch by Sylvain Viollon.
    • LP#1281139: .attrib value of Comments lost its mutation methods
  • in 3.3.0. Even though it is empty and immutable, it should still
  • provide the same interface as that returned for Elements.
    [3.3.2-1]
  • 3.3.1 (2014-02-12)
  • ==================
  • Bugs fixed
    • LP#1014290: HTML documents parsed with parser.feed() failed to find
  • elements during tag iteration.
    • LP#1273709: Building in PyPy failed due to missing support for
  • PyUnicode_Compare() and PyByteArray_*() in PyPy’s C-API.
    • LP#1274413: Compilation in MSVC failed due to missing ‘stdint.h’ standard
  • header file.
    • LP#1274118: iterparse() failed to parse BOM prefixed files.
      [3.3.0-2]
  • Update Cython requirement to >= 0.20
    [3.3.0-1]
  • 3.3.0 (2014-01-26)
  • ==================
  • Features added
  • Bugs fixed
    • The heuristic that distinguishes file paths from URLs was tightened
  • to produce less false negatives.
  • Other changes
  • 3.3.0beta5 (2014-01-18)
  • =======================
  • Features added
    • The PEP 393 unicode parsing support gained a fallback for wchar strings
  • which might still be somewhat common on Windows systems.
  • Bugs fixed
    • Several error handling problems were fixed throughout the code base that
  • could previously lead to exceptions being silently swallowed or not
  • properly reported.
    • The C-API function appendChild() is now deprecated as it does not
  • propagate exceptions (its return type is void). The new function
  • appendChildToElement() was added as a safe replacement.
    • Passing a string into fromstringlist() raises an exception instead of
  • parsing the string character by character.
  • Other changes
    • Document cleanup code was simplified using the new GC features in
  • Cython 0.20.
  • 3.3.0beta4 (2014-01-12)
  • =======================
  • Features added
  • Bugs fixed
    • The (empty) value returned by the attrib property of Entity and
  • Comment objects was mutable.
    • Element class lookup wasn’t available for the new pull parsers or when
  • using a custom parser target.
    • Setting Element attributes on instantiation with both the attrib
  • argument and keyword arguments could modify the mapping passed as
  • attrib.
    • LP#1266171: DTDs instantiated from internal/external subsets (i.e.
  • through the docinfo property) lost their attribute declarations.
  • Other changes
    • Built with Cython 0.20pre (gitrev 012ae82eb) to prepare support for
  • Python 3.4.
  • 3.3.0beta3 (2014-01-02)
  • =======================
  • Features added
    • Unicode string parsing was optimised for Python 3.3 (PEP 393).
  • Bugs fixed
    • HTML parsing of Unicode strings could misdecode the input on some
  • platforms.
    • Crash in xmlfile() when closing open elements out of order in an error
  • case.
  • Other changes
  • 3.3.0beta2 (2013-12-20)
  • =======================
  • Features added
    • iterparse() supports the recover option.
  • Bugs fixed
    • Crash in iterparse() for HTML parsing.
    • Crash in target parsing with attributes.
  • Other changes
    • The safety check in the read-only tree implementation (e.g. used by
  • PythonElementClassLookup) raises a more appropriate
  • ReferenceError for illegal access after tree disposal instead of
  • an AssertionError. This should only impact test code that
  • specifically checks the original behaviour.
  • 3.3.0beta1 (2013-12-12)
  • =======================
  • Features added
    • New option handle_failures in make_links_absolute() and
  • resolve_base_href() (lxml.html) that enables ignoring or
  • discarding links that fail to parse as URLs.
    • New parser classes XMLPullParser and HTMLPullParser for
  • incremental parsing, as implemented for ElementTree in Python 3.4.
    • iterparse() enables recovery mode by default for HTML parsing
  • (html=True).
  • Bugs fixed
    • LP#1255132: crash when trying to run validation over non-Element (e.g.
  • comment or PI).
    • Error messages in the log and in exception messages that originated
  • from libxml2 could accidentally be picked up from preceding warnings
  • instead of the actual error.
    • The ElementMaker in lxml.objectify did not accept a dict as
  • argument for adding attributes to the element it’s building. This
  • works as in lxml.builder now.
    • LP#1228881: repr(XSLTAccessControl) failed in Python 3.
    • Raise ValueError when trying to append an Element to itself or
  • to one of its own descendants, instead of running into an infinite
  • loop.
    • LP#1206077: htmldiff discarded whitespace from the output.
    • Compressed plain-text serialisation to file-like objects was broken.
    • lxml.html.formfill: Fix textarea form filling.
  • The textarea used to be cleared before the new content was set,
  • which removed the name attribute.
  • Other changes
    • Some basic API classes use freelists internally for faster
  • instantiation. This can speed up some iterparse() scenarios,
  • for example.
    • iterparse() was rewritten to use the new *PullParser
  • classes internally instead of being a parser itself.
    [3.2.4-1]
  • 3.2.4 (2013-11-07)
  • ==================
  • Bugs fixed
    • Memory leak when creating an XPath evaluator in a thread.
    • LP#1228881: repr(XSLTAccessControl) failed in Python 3.
    • Raise ValueError when trying to append an Element to itself or
  • to one of its own descendants.
    • LP#1206077: htmldiff discarded whitespace from the output.
    • Compressed plain-text serialisation to file-like objects was broken.
      [3.2.3-2]
  • Add requirement for on python-cssselect for the python2 version
    [3.2.3-1]
  • and here’s a version 3.2.3. The last release accidentally lost the ability
  • to work on Python 2.4. There are no other changes over 3.2.2.
  • 3.2.2 (2013-07-28)
  • ==================
  • Features added
  • Bugs fixed
    • LP#1185701: spurious XMLSyntaxError after finishing iterparse().
    • Crash in lxml.objectify during xsi annotation.
  • Other changes
    • Return values of user provided element class lookup methods are now
  • validated against the type of the XML node they represent to prevent
  • API class mismatches.
    [3.2.1-1]
  • 3.2.1 (2013-05-11)
  • ==================
  • Features added
    • The methods apply_templates() and process_children() of XSLT
  • extension elements have gained two new boolean options elements_only
  • and remove_blank_text that discard either all strings or
  • whitespace-only strings from the result list.
  • Bugs fixed
    • When moving Elements to another tree, the namespace cleanup mechanism
  • no longer drops namespace prefixes from attributes for which it finds
  • a default namespace declaration, to prevent them from appearing as
  • unnamespaced attributes after serialisation.
    • Returning non-type objects from a custom class lookup method could lead
  • to a crash.
    • Instantiating and using subtypes of Comments and ProcessingInstructions
  • crashed.
    [3.2.0-1]
  • 3.2.0 (2013-04-28)
  • ==================
  • Features added
  • Bugs fixed
    • LP#690319: Leading whitespace could change the behaviour of the string
  • parsing functions in lxml.html.
    • LP#599318: The string parsing functions in lxml.html are more robust
  • in the face of uncommon HTML content like framesets or missing body tags.
  • Patch by Stefan Seelmann.
    • LP#712941: I/O errors while trying to access files with paths that
  • contain non-ASCII characters could raise UnicodeDecodeError instead
  • of properly reporting the IOError.
    • LP#673205: Parsing from in-memory strings disabled network access in the
  • default parser and made subsequent attempts to parse from a URL fail.
    • LP#971754: lxml.html.clean appends ‘nofollow’ to ‘rel’ attributes instead
  • of overwriting the current value.
    • LP#715687: lxml.html.clean no longer discards scripts that are explicitly
  • allowed by the user provided whitelist. Patch by Christine Koppelt.
  • 3.1.2 (2013-04-12)
  • ==================
  • Bugs fixed
    • LP#1136509: Passing attributes through the namespace-unaware API of
  • the sax bridge (i.e. the handler.startElement() method) failed
  • with a TypeError. Patch by Mike Bayer.
    • LP#1123074: Fix serialisation error in XSLT output when converting
  • the result tree to a Unicode string.
    • GH#105: Replace illegal usage of xmlBufLength() in libxml2 2.9.0
  • by properly exported API function xmlBufUse().
  • 3.1.1 (2013-03-29)
  • ==================
  • Features added
  • Bugs fixed
    • LP#1160386: Write access to lxml.html.FormElement.fields raised
  • an AttributeError in Py3.
    • Illegal memory access during cleanup in incremental xmlfile writer.
  • Other changes
    • The externally useless class lxml.etree._BaseParser was removed
  • from the module dict.
    [3.1.0-1]
  • 3.1.0 (2013-02-10)
  • ==================
  • Features added
    • GH#89: lxml.html.clean allows overriding the set of attributes that it
  • considers ‘safe’. Patch by Francis Devereux.
  • Bugs fixed
    • LP#1104370: copy.copy(el.attrib) raised an exception. It now returns
  • a copy of the attributes as a plain Python dict.
    • GH#95: When used with namespace prefixes, the el.find*() methods
  • always used the first namespace mapping that was provided for each
  • path expression instead of using the one that was actually passed
  • in for the current run.
    • LP#1092521, GH#91: Fix undefined C symbol in Python runtimes compiled
  • without threading support. Patch by Ulrich Seidl.
  • Other changes
  • 3.1beta1 (2012-12-21)
  • =====================
  • Features added
    • New build-time option --with-unicode-strings for Python 2 that
  • makes the API always return Unicode strings for names and text
  • instead of byte strings for plain ASCII content.
    • New incremental XML file writing API etree.xmlfile().
    • E factory in lxml.objectify is callable to simplify the creation of
  • tags with non-identifier names without having to resort to getattr().
  • Bugs fixed
    • When starting from a non-namespaced element in lxml.objectify, searching
  • for a child without explicitly specifying a namespace incorrectly found
  • namespaced elements with the requested local name, instead of restricting
  • the search to non-namespaced children.
    • GH#85: Deprecation warnings were fixed for Python 3.x.
    • GH#33: lxml.html.fromstring() failed to accept bytes input in Py3.
    • LP#1080792: Static build of libxml2 2.9.0 failed due to missing file.
  • Other changes
    • The externally useless class _ObjectifyElementMakerCaller was
  • removed from the module API of lxml.objectify.
    • LP#1075622: lxml.builder is faster for adding text to elements with
  • many children. Patch by Anders Hammarquist.
    [3.0.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
    [3.0.1-1]
  • 3.0.1 (2012-10-14)
  • Bugs fixed
    • LP#1065924: Element proxies could disappear during garbage collection
  • in PyPy without proper cleanup.
    • GH#71: Failure to work with libxml2 2.6.x.
    • LP#1065139: static MacOS-X build failed in Py3.
      [3.0-1]
  • 3.0 (2012-10-08)
  • ================
  • Features added
  • Bugs fixed
    • End-of-file handling was incorrect in iterparse() when reading from
  • a low-level C file stream and failed in libxml2 2.9.0 due to its
  • improved consistency checks.
  • Other changes
    • The build no longer uses Cython by default unless the generated C files
  • are missing. To use Cython, pass the option ‘–with-cython’. To ignore
  • the fatal build error when Cython is required but not available (e.g. to
  • run special setup.py commands that do not actually run a build), pass
  • ‘–without-cython’.
  • 3.0beta1 (2012-09-26)
  • =====================
  • Features added
    • Python level access to (optional) libxml2 memory debugging features
  • to simplify debugging of memory leaks etc.
  • Bugs fixed
    • Fix a memory leak in XPath by switching to Cython 0.17.1.
    • Some tests were adapted to work with PyPy.
  • Other changes
    • The code was adapted to work with the upcoming libxml2 2.9.0 release.
  • 3.0alpha2 (2012-08-23)
  • ======================
  • Features added
    • The .iter() method of elements now accepts tag arguments like ‘{*}name’
  • to search for elements with a given local name in any namespace. With
  • this addition, all combinations of wildcards now work as expected:
  • ‘{ns}name’, ‘{}name’, ‘{}name’, '{ns}’, ‘{}’ and '{}*’. Note that
  • ‘name’ is equivalent to ‘{}name’, but ‘’ is '{}*’. The same change
  • applies to the .getiterator(), .itersiblings(), .iterancestors(),
  • .iterdescendants(), .iterchildren() and .itertext() methods, the
  • strip_attributes(), strip_elements() and strip_tags() functions as well
  • as the iterparse() function.
    • C14N allows specifying the inclusive prefixes to be promoted to
  • top-level during exclusive serialisation.
  • Bugs fixed
    • Passing long Unicode strings into the feed() parser interface failed to
  • read the entire string.
  • Other changes
  • 3.0alpha1 (2012-07-31)
  • ======================
  • Features added
    • Initial support for building in PyPy (through cpyext).
    • DTD objects gained an API that allows read access to their
  • declarations.
    • xpathgrep.py gained support for parsing line-by-line (e.g.
  • from grep output) and for surrounding the output with a new root
  • tag.
    • E-factory in lxml.builder accepts subtypes of known data
  • types (such as string subtypes) when building elements around them.
    • Tree iteration and iterparse() with a selective tag
  • argument supports passing a set of tags. Tree nodes will be
  • returned by the iterators if they match any of the tags.
  • Bugs fixed
    • The .find*() methods in lxml.objectify no longer use XPath
  • internally, which makes them faster in many cases (especially when
  • short circuiting after a single or couple of elements) and fixes
  • some behavioural differences compared to lxml.etree. Note that
  • this means that they no longer support arbitrary XPath expressions
  • but only the subset that the ElementPath language supports.
  • The previous implementation was also redundant with the normal
  • XPath support, which can be used as a replacement.
    • el.find(‘*’) could accidentally return a comment or processing
  • instruction that happened to be in the wrong spot. (Same for the
  • other .find*() methods.)
    • The error logging is less intrusive and avoids a global setup where
  • possible.
    • Fixed undefined names in html5lib parser.
    • Element.attrib.update() did not accept an attrib of
  • another Element as parameter.
    • For subtypes of ElementBase that make the .text or .tail
  • properties immutable (as in objectify, for example), inserting text
  • when creating Elements through the E-Factory feature of the class
  • constructor would fail with an exception, stating that the text
  • cannot be modified.
  • Other changes
    • The code base was overhauled to properly use ‘const’ where the API
  • of libxml2 and libxslt requests it. This also has an impact on the
  • public C-API of lxml itself, as defined in etreepublic.pxd, as
  • well as the provided declarations in the lxml/includes/ directory.
  • Code that uses these declarations may have to be adapted. On the
  • plus side, this fixes several C compiler warnings, also for user
  • code, thus making it easier to spot real problems again.
    • The functionality of ‘lxml.cssselect’ was moved into a separate PyPI
  • package called ‘cssselect’. To continue using it, you must install
  • that package separately. The ‘lxml.cssselect’ module is still
  • available and provides the same interface, provided the ‘cssselect’
  • package can be imported at runtime.
    • Element attributes passed in as an attrib dict or as keyword
  • arguments are now sorted by (namespaced) name before being created
  • to make their order predictable for serialisation and iteration.
  • Note that adding or deleting attributes afterwards does not take
  • that order into account, i.e. setting a new attribute appends it
  • after the existing ones.
    • Several classes that are for internal use only were removed
  • from the lxml.etree module dict:
  • _InputDocument, _ResolverRegistry, _ResolverContext, _BaseContext,
  • _ExsltRegExp, _IterparseContext, _TempStore, _ExceptionContext,
  • __ContentOnlyElement, _AttribIterator, _NamespaceRegistry,
  • _ClassNamespaceRegistry, _FunctionNamespaceRegistry,
  • _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
  • _FileReaderContext, _ParserContext, _PythonSaxParserTarget,
  • _TargetParserContext, _ReadOnlyProxy, _ReadOnlyPIProxy,
  • _ReadOnlyEntityProxy, _ReadOnlyElementProxy, _OpaqueNodeWrapper,
  • _OpaqueDocumentWrapper, _ModifyContentOnlyProxy,
  • _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
  • _AppendOnlyElementProxy, _SaxParserContext, _FilelikeWriter,
  • _ParserSchemaValidationContext, _XPathContext,
  • _XSLTResolverContext, _XSLTContext, _XSLTQuotedStringParam
    • Several internal classes can no longer be inherited from:
  • _InputDocument, _ResolverRegistry, _ExsltRegExp, _ElementUnicodeResult,
  • _IterparseContext, _TempStore, _AttribIterator, _ClassNamespaceRegistry,
  • _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
  • _FileReaderContext, _PythonSaxParserTarget, _TargetParserContext,
  • _ReadOnlyPIProxy, _ReadOnlyEntityProxy, _OpaqueDocumentWrapper,
  • _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
  • _AppendOnlyElementProxy, _FilelikeWriter, _ParserSchemaValidationContext,
  • _XPathContext, _XSLTResolverContext, _XSLTContext,
  • _XSLTQuotedStringParam, _XSLTResultTree, _XSLTProcessingInstruction
    [2.3.5-1]
  • Bugs fixed
    • Crash when merging text nodes in element.remove().
    • Crash in sax/target parser when reporting empty doctype.
      [2.3.4-1]
  • Bugs fixed
    • Crash when building an nsmap (Element property) with empty namespace
  • URIs.
    • Crash due to race condition when errors (or user messages) occur during
  • threaded XSLT processing (or compilation).
    • XSLT stylesheet compilation could ignore compilation errors.
      [2.3.3-4]
  • rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
    [2.3.3-3]
  • remove rhel logic from with_python3 conditional
    [2.3.3-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
    [2.3.3-1]
  • 2.3.3 (2012-01-04)
  • Features added
    • lxml.html.tostring() gained new serialisation options with_tail and
  • doctype.
  • Bugs fixed
    • Fixed a crash when using iterparse() for HTML parsing and requesting
  • start events.
    • Fixed parsing of more selectors in cssselect. Whitespace before pseudo-
  • elements and pseudo-classes is significant as it is a descendant
  • combinator. ‘E :pseudo’ should parse the same as ‘E *:pseudo’, not
  • ‘E:pseudo’. Patch by Simon Sapin.
    • lxml.html.diff no longer raises an exception when hitting ‘img’ tags
  • without ‘src’ attribute.
    [2.3.2-1]
  • 2.3.2 (2011-11-11)
  • Features added
    • lxml.objectify.deannotate() has a new boolean option
  • cleanup_namespaces to remove the objectify namespace declarations

  • (and generally clean up the namespace declarations) after removing

  • the type annotations.
    • lxml.objectify gained its own SubElement() function as a copy of
  • etree.SubElement to avoid an otherwise redundant import of

  • lxml.etree on the user side.
  • Bugs fixed
    • Fixed the ‘descendant’ bug in cssselect a second time (after a first
  •  fix in lxml 2.3.1). The previous change resulted in a serious

  •  performance regression for the XPath based evaluation of the

  •  translated expression. Note that this breaks the usage of some

  •  of the generated XPath expressions as XSLT location paths that

  •  previously worked in 2.3.1.
    • Fixed parsing of some selectors in cssselect. Whitespace after
  •  combinators '&gt;', '+' and '~' is now correctly ignored. Previously

  •  it was parsed as a descendant combinator. For example, 'div&gt; .foo'

  •  was parsed the same as 'div&gt;* .foo' instead of 'div&gt;.foo'. Patch by

  •  Simon Sapin.

[2.3.1-1]

  • Features added
    • New option kill_tags in lxml.html.clean to remove specific
  • tags and their content (i.e. their whole subtree).
    • pi.get() and pi.attrib on processing instructions to parse
  • pseudo-attributes from the text content of processing instructions.
    • lxml.get_include() returns a list of include paths that can be
  • used to compile external C code against lxml.etree. This is
  • specifically required for statically linked lxml builds when code
  • needs to compile against the exact same header file versions as lxml
  • itself.
    • Resolver.resolve_file() takes an additional option
  • close_file that configures if the file(-like) object will be
  • closed after reading or not. By default, the file will be closed,
  • as the user is not expected to keep a reference to it.
  • Bugs fixed
    • HTML cleaning didn’t remove ‘data:’ links.
    • The html5lib parser integration now uses the ‘official’
  • implementation in html5lib itself, which makes it work with newer
  • releases of the library.
    • In lxml.sax, endElementNS() could incorrectly reject a plain
  • tag name when the corresponding start event inferred the same plain
  • tag name to be in the default namespace.
    • When an open file-like object is passed into parse() or
  • iterparse(), the parser will no longer close it after use. This
  • reverts a change in lxml 2.3 where all files would be closed. It is
  • the users responsibility to properly close the file(-like) object,
  • also in error cases.
    • Assertion error in lxml.html.cleaner when discarding top-level elements.
    • In lxml.cssselect, use the xpath ‘A//B’ (short for
  • ‘A/descendant-or-self::node()/B’) instead of ‘A/descendant::B’ for the
  • css descendant selector (‘A B’). This makes a few edge cases to be
  • consistent with the selector behavior in WebKit and Firefox, and makes
  • more css expressions valid location paths (for use in xsl:template
  • match).
  • [tags no longer show up in the
  • collected form values.
  • [values to/from a multiple select form
  • field properly selects them and unselects them.
  • Other changes
    • Static builds can specify the download directory with the
  • –download-dir option.
    [2.3-1]
  • 2.3 (2011-02-06)
  • ================
  • Features added
    • When looking for children, lxml.objectify takes ‘{}tag’ as
  • meaning an empty namespace, as opposed to the parent namespace.
  • Bugs fixed
    • When finished reading from a file-like object, the parser
  • immediately calls its .close() method.
    • When finished parsing, iterparse() immediately closes the input
  • file.
    • Work-around for libxml2 bug that can leave the HTML parser in a
  • non-functional state after parsing a severly broken document (fixed
  • in libxml2 2.7.8).
    • marque tag in HTML cleanup code is correctly named marquee.
  • Other changes
    • Some public functions in the Cython-level C-API have more explicit
  • return types.
  • 2.3beta1 (2010-09-06)
  • =====================
  • Features added
  • Bugs fixed
    • Crash in newer libxml2 versions when moving elements between
  • documents that had attributes on replaced XInclude nodes.
    • XMLID() function was missing the optional parser and
  • base_url parameters.
    • Searching for wildcard tags in iterparse() was broken in Py3.
    • lxml.html.open_in_browser() didn’t work in Python 3 due to the
  • use of os.tempnam. It now takes an optional ‘encoding’ parameter.
  • Other changes
  • 2.3alpha2 (2010-07-24)
  • ======================
  • Features added
  • Bugs fixed
    • Crash in XSLT when generating text-only result documents with a
  • stylesheet created in a different thread.
  • Other changes
    • repr() of Element objects shows the hex ID with leading 0x
  • (following ElementTree 1.3).
  • 2.3alpha1 (2010-06-19)
  • ======================
  • Features added
    • Keyword argument namespaces in lxml.cssselect.CSSSelector()
  • to pass a prefix-to-namespace mapping for the selector.
    • New function lxml.etree.register_namespace(prefix, uri) that
  • globally registers a namespace prefix for a namespace that newly
  • created Elements in that namespace will use automatically. Follows
  • ElementTree 1.3.
    • Support ‘unicode’ string name as encoding parameter in
  • tostring(), following ElementTree 1.3.
    • Support ‘c14n’ serialisation method in ElementTree.write() and
  • tostring(), following ElementTree 1.3.
    • The ElementPath expression syntax (el.find*()) was extended to
  • match the upcoming ElementTree 1.3 that will ship in the standard
  • library of Python 3.2/2.7. This includes extended support for
  • predicates as well as namespace prefixes (as known from XPath).
    • During regular XPath evaluation, various ESXLT functions are
  • available within their namespace when using libxslt 1.1.26 or later.
    • Support passing a readily configured logger instance into
  • PyErrorLog, instead of a logger name.
    • On serialisation, the new doctype parameter can be used to
  • override the DOCTYPE (internal subset) of the document.
    • New parameter output_parent to XSLTExtension.apply_templates()
  • to append the resulting content directly to an output element.
    • XSLTExtension.process_children() to process the content of the
  • XSLT extension element itself.
    • ISO-Schematron support based on the de-facto Schematron reference
  • ‘skeleton implementation’.
    • XSLT objects now take XPath object as call stylesheet
  • parameters.
    • Enable path caching in ElementPath (el.find*()) to avoid parsing
  • overhead.
    • Setting the value of a namespaced attribute always uses a prefixed
  • namespace instead of the default namespace even if both declare the
  • same namespace URI. This avoids serialisation problems when an
  • attribute from a default namespace is set on an element from a
  • different namespace.
    • XSLT extension elements: support for XSLT context nodes other than
  • elements: document root, comments, processing instructions.
    • Support for strings (in addition to Elements) in node-sets returned
  • by extension functions.
    • Forms that lack an action attribute default to the base URL of
  • the document on submit.
    • XPath attribute result strings have an attrname property.
    • Namespace URIs get validated against RFC 3986 at the API level
  • (required by the XML namespace specification).
    • Target parsers show their target object in the .target property
  • (compatible with ElementTree).
  • Bugs fixed
    • API is hardened against invalid proxy instances to prevent crashes
  • due to incorrectly instantiated Element instances.
    • Prevent crash when instantiating CommentBase and friends.
    • Export ElementTree compatible XML parser class as
  • XMLTreeBuilder, as it is called in ET 1.2.
    • ObjectifiedDataElements in lxml.objectify were not hashable. They
  • now use the hash value of the underlying Python value (string,
  • number, etc.) to which they compare equal.
    • Parsing broken fragments in lxml.html could fail if the fragment
  • contained an orphaned closing ’
OSVersionArchitecturePackageVersionFilename
oracle linux8srccython< 0.29.21-5.moduleCython-0.29.21-5.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux8srcpyyaml< 5.4.1-1.modulePyYAML-5.4.1-1.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux8srcmod_wsgi< 4.7.1-7.modulemod_wsgi-4.7.1-7.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux8srcnumpy< 1.19.4-3.modulenumpy-1.19.4-3.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux8srcpybind11< 2.7.1-1.modulepybind11-2.7.1-1.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux8srcpytest< 6.0.2-2.modulepytest-6.0.2-2.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux8srcpython-pymysql< 0.10.1-2.modulepython-PyMySQL-0.10.1-2.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux8srcpython-attrs< 20.3.0-2.modulepython-attrs-20.3.0-2.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux8srcpython-cffi< 1.14.3-2.modulepython-cffi-1.14.3-2.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux8srcpython-chardet< 3.0.4-19.modulepython-chardet-3.0.4-19.module+el8.9.0+90016+9c2d6573.src.rpm
Rows per page:
1-10 of 1681

Related

redhat 5
nessus 75
osv 14
almalinux 5
rocky 4
ibm 13
openvas 40
fedora 9
debian 1
debiancve 2
oraclelinux 5
amazon 2
github 2
veracode 2
mageia 2
freebsd 4
cbl_mariner 2
redhatcve 2
cvelist 1
f5 1
cve 2
prion 1
nvd 2
ubuntu 1
gentoo 1
alpinelinux 1
redhat
redhat
(RHSA-2024:2985) Moderate: python39:3.9 and python39-devel:3.9 security update
2024-05-22 06:35:16
(RHSA-2023:0835) Moderate: python-setuptools security update
2023-02-21 08:46:22
(RHSA-2023:0952) Moderate: python-setuptools security update
2023-02-28 07:52:59
nessus
nessus
RHEL 8 : python39:3.9 and python39-devel:3.9 (RHSA-2024:2985)
2024-05-23 00:00:00
Rocky Linux 8 : python39:3.9 and python39-devel:3.9 (RLSA-2024:2985)
2024-06-14 00:00:00
EulerOS Virtualization 2.11.1 : python-cryptography (EulerOS-SA-2023-2740)
2024-01-16 00:00:00
osv
osv
Moderate: python39:3.9 and python39-devel:3.9 security update
2024-05-22 00:00:00
Moderate: python39:3.9 and python39-devel:3.9 security update
2024-06-14 13:59:30
CVE-2023-23931
2023-02-07 21:15:09
almalinux
almalinux
Moderate: python39:3.9 and python39-devel:3.9 security update
2024-05-22 00:00:00
Moderate: python-setuptools security update
2023-02-21 00:00:00
Moderate: python3.11-urllib3 security update
2024-05-22 00:00:00
rocky
rocky
python39:3.9 and python39-devel:3.9 security update
2024-06-14 13:59:30
python3.11-urllib3 security update
2024-06-14 13:59:30
python-setuptools security update
2023-02-22 01:08:44
ibm
ibm
Security Bulletin: IBM Storage Fusion HCI is vulnerable to denial of service, cross-site scripting, and obtaining sensitive information due to Pypa, Pallets Jinja, requests, and urllib3.
2024-05-11 16:54:28
Security Bulletin: A vulnerability in Pypa Setuptools may affect IBM Robotic Process Automation for Cloud Pak and result in a denial of service (CVE-2022-40897)
2023-06-20 14:27:06
Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service due to [CVE-2022-40897]
2023-07-25 13:39:30
openvas
openvas
Fedora: Security Advisory for python-cryptography (FEDORA-2023-749dd47c79)
2023-03-12 00:00:00
Fedora: Security Advisory for python-cryptography (FEDORA-2023-672f668f51)
2023-03-11 00:00:00
Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2023-2320)
2023-07-10 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: python-cryptography-36.0.0-4.fc36
2023-03-10 01:38:26
[SECURITY] Fedora 37 Update: python-cryptography-37.0.2-5.fc37
2023-02-27 01:49:10
[SECURITY] Fedora 38 Update: python-cryptography-37.0.2-8.fc38
2023-03-11 03:35:22
debian
debian
[SECURITY] [DLA 3331-1] python-cryptography security update
2023-02-22 20:00:30
debiancve
debiancve
CVE-2023-23931
2023-02-07 21:15:09
CVE-2023-43804
2023-10-04 17:15:10
oraclelinux
oraclelinux
python-setuptools security update
2023-02-22 00:00:00
python-cryptography security update
2023-11-11 00:00:00
python3-setuptools security update
2023-05-23 00:00:00
amazon
amazon
Medium: python-setuptools
2023-08-03 18:10:00
Medium: python2-setuptools
2023-03-02 22:35:00
github
github
Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf
2023-02-07 20:54:10
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
2022-12-23 00:30:23
veracode
veracode
Memory Corruption
2023-02-08 08:28:21
Regular Expression Denial Of Service (ReDoS)
2022-12-23 08:31:40
mageia
mageia
Updated python-cryptography packages fix security vulnerability
2023-02-27 23:27:16
Updated python-setuptools packages fix security vulnerability
2023-07-07 08:54:45
freebsd
freebsd
py-cryptography -- allows programmers to misuse an API
2023-02-07 00:00:00
py39-setuptools58 -- denial of service vulnerability
2022-12-23 00:00:00
py27-setuptools44 -- denial of service vulnerability
2022-12-23 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-23931 affecting package python-cryptography for versions less than 3.3.2-5
2024-03-19 17:21:46
CVE-2023-23931 affecting package python-cryptography for versions less than 3.3.2-4
2023-02-24 01:54:33
redhatcve
redhatcve
CVE-2022-40897
2023-01-05 18:35:06
CVE-2023-27043
2023-05-08 09:52:52
cvelist
cvelist
CVE-2022-40897
2022-12-22 00:00:00
f5
f5
K000138600 : Python vulnerability CVE-2023-43804
2024-02-13 00:00:00
cve
cve
CVE-2023-43804
2023-10-04 17:15:10
CVE-2022-40897
2022-12-23 00:15:13
prion
prion
Design/Logic Flaw
2023-02-07 21:15:00
nvd
nvd
CVE-2023-23931
2023-02-07 21:15:09
CVE-2022-40897
2022-12-23 00:15:13
ubuntu
ubuntu
Setuptools vulnerability
2023-01-23 00:00:00
gentoo
gentoo
Setuptools: Denial of Service
2024-05-05 00:00:00
alpinelinux
alpinelinux
CVE-2023-23931
2023-02-07 21:15:09

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

6.7 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.5%

JSON
Related for ELSA-2024-2985
redhat5nessus75osv14almalinux5rocky4ibm13openvas40fedora9debian1debiancve2oraclelinux5amazon2github2veracode2mageia2freebsd4cbl_mariner2redhatcve2cvelist1f51cve2prion1nvd2ubuntu1gentoo1alpinelinux1