Lucene search

K
oraclelinuxOracleLinuxELSA-2024-2987
HistoryMay 24, 2024 - 12:00 a.m.

python27:2.7 security update

2024-05-2400:00:00
linux.oracle.com
2
python 2.7
security update
cve-2021-20095
rpm upgrade
python-freezegun
pytest
python36
fedora 28
fedora 27
fedora 26
fedora 24
fedora 23
fedora 21
fedora 20
fedora 19
fedora 18
fedora 17
cldr

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.5%

babel
[2.5.1-10]

  • Tue May 31 2016 Nils Philippsen
  • fix source URL
    [2.3.4-1]
  • version 2.3.4
  • always build Python3 subpackages
  • remove obsolete packaging constructs
  • update to current Python packaging guidelines
  • build docs non-destructively
  • tag license file as %license
  • use %python_provide macro only if present
  • update remove-pytz-version patch
  • fix build dependencies
  • set TZ in %check
    [1.3-12]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
    [1.3-11]
  • Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5
    [1.3-10]
  • Also make sure that the babel package that has pybabel depends on the correct
    packages (python2 packages on F23 or less and python3 packages on F24 and
    greater.)
    [1.3-9]
  • Install the python3 version of pybabel on Fedora 24+ to match with Fedora’s
    default python version
    [1.3-8]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
    [1.3-7]
  • Remove pytz version requirement in egginfo as it confuses newer setuptools
    [1.3-6]
  • Change python-setuptools-devel BR into python-setuptools
    [1.3-5]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
    [1.3-4]
  • Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4
    [1.3-3]
  • fix dependencies (#1083470)
    [1.3-2]
  • enable python3 subpackage
    [1.3-1]
  • update to Babel 1.3
  • disabled %check as it tries to download the CLDR
    [0.9.6-9]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
    [0.9.6-8]
  • split documentation off to a separate subpackage
    [0.9.6-7]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
    [0.9.6-6]
  • run tests in %check
  • add pytz build requirement for tests
    [0.9.6-5]
  • rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
    [0.9.6-4]
  • disable building of non-functional python3 subpackage (#761583)
    [0.9.6-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
    [0.9.6-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
    [0.9.6-1]
  • version 0.9.6:
    • Backport r493-494: documentation typo fixes.
    • Make the CLDR import script work with Python 2.7.
    • Fix various typos.
    • Fixed Python 2.3 compatibility (ticket #146, #233).
    • Sort output of list-locales.
    • Make the POT-Creation-Date of the catalog being updated equal to
      POT-Creation-Date of the template used to update (ticket #148).
    • Use a more explicit error message if no option or argument (command) is
      passed to pybabel (ticket #81).
    • Keep the PO-Revision-Date if it is not the default value (ticket #148).
    • Make --no-wrap work by reworking --width’s default and mimic xgettext’s
      behaviour of always wrapping comments (ticket #145).
    • Fixed negative offset handling of Catalog._set_mime_headers (ticket #165).
    • Add --project and --version options for commandline (ticket #173).
    • Add a ne() method to the Local class.
    • Explicitly sort instead of using sorted() and don’t assume ordering
      (Python 2.3 and Jython compatibility).
    • Removed ValueError raising for string formatting message checkers if the
      string does not contain any string formattings (ticket #150).
    • Fix Serbian plural forms (ticket #213).
    • Small speed improvement in format_date() (ticket #216).
    • Fix number formatting for locales where CLDR specifies alt or draft
      items (ticket #217)
    • Fix bad check in format_time (ticket #257, reported with patch and tests by
      jomae)
    • Fix so frontend.CommandLineInterface.run does not accumulate logging
      handlers (#227, reported with initial patch by dfraser)
    • Fix exception if environment contains an invalid locale setting (#200)
  • install python2 rather than python3 executable (#710880)
    [0.9.5-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
    [0.9.5-3]
  • Add python3 subpackage
    [0.9.5-2]
  • Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
    [0.9.5-1]
  • This release contains a small number of bugfixes over the 0.9.4
  • release.
  • What’s New:

    • Fixed the case where messages containing square brackets would break
  • with an unpack error
    • Fuzzy matching regarding plurals should NOT be checked against
  • len(message.id) because this is always 2, instead, it’s should be
  • checked against catalog.num_plurals (ticket #212).
    [0.9.4-5]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
    [0.9.4-4]
  • Added missing requires to python-setuptools for pkg_resources
    [0.9.4-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
    [0.9.4-2]
  • Rebuild for Python 2.6
    [0.9.4-1]
  • Update to 0.9.4
    [0.9.3-1]
  • Update to 0.9.3
    [0.9.1-1]
  • Update to 0.9.1
    [0.9-2]
  • BR python-setuptools-devel
    [0.9-1]
  • Update to 0.9
    [0.8.1-1]
  • Update to 0.8.1
  • Remove upstreamed patch.
    [0.8-3]
  • Replace patch with one that actually applies.
    [0.8-2]
  • Apply upstream patch to rename command line script to ‘pybabel’ - BZ#246208
    [0.8-1]
  • First version for Fedora
    Cython
    [0.28.1-7]
  • Bumping due to problems with modular RPM upgrade path
  • Resolves: rhbz#1695587
    [0.28.1-6]
  • Replace GCC’s attribute optimize(‘Os’) by the better supported and similar (cold).
  • Resolves: rhbz#1658621
    [0.28.1-5]
  • Remove unversioned provides
  • Resolves: rhbz#1628242
    [0.28.1-4]
  • Remove unversioned binaries from python2 subpackage
  • Resolves: rhbz#1613343
    [0.28.1-3]
  • First version for python27 module
    numpy
    [1:1.14.2-16]
  • Fix include path
  • Related: rhbz#1907601
    [1:1.14.2-15]
  • Fix %check
  • Related: rhbz#1907601
    [1:1.14.2-14]
  • Use macros rather than hardcoded paths
  • Resolves: rhbz#1907601
    [1:1.14.2-13]
  • Fix CVE-2019-6446
  • Resolves: rhbz#1668829
    [1.14.2-12]
  • Set proper build flags for https://fedoraproject.org/wiki/Changes/Python_Extension_Flags
  • Resolves: rhbz#1715036
    [1.14.2-11]
  • Fix broken float128 on all arches except x86_64
  • Resolves: rhbz#1688709
    [1.14.2-10]
  • Bumping due to problems with modular RPM upgrade path
  • Resolves: rhbz#1695587
    [1:1.14.2-9]
  • Remove unversioned provides
  • Resolves: rhbz#1628242
    [1:1.14.2-8]
  • Fix unversioned requires/buildrequires
  • Resolves: rhbz#1628242
    [1:1.14.2-7]
  • Bring symlink f2py2 back for symlink modules
  • Resolves: rhbz#1615727
    [1:1.14.2-6]
  • Remove unversioned binaries from python2 subpackage
  • Resolves: rhbz#1613343
    [1:1.14.2-5]
  • Switch python3 coditions to bcond
    [1:1.14.2-4]
  • Use python2 macros instead of unversioned python macros
    [1:1.14.2-3]
  • Change the shebang of f2py to the versioned /usr/bin/python2
    [1:1.14.2-2]
  • Fix incorrect Python version guess when building on Platform-Python
    [1:1.14.2-1]
  • 1.14.2
    [1:1.14.1-1]
  • 1.14.1
    [1:1.14.0-0.rc1.1]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
    [1:1.14.0-0.rc1]
  • 1.14.0 rc1
    [1:1.13.3-5]
  • Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
    [1:1.13.3-4]
  • Split out doc subpackage.
    [1:1.13.3-3]
  • Cleanup spec file conditionals
    [1:1.13.3-2]
  • set proper environment variables for openblas
    [1:1.13.3-1]
  • 1.13.3
    [1:1.13.2-1]
  • 1.13.2
    [1:1.13.1-4]
  • Use openblas where available, BZ 1472318.
    [1:1.13.1-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
    [1:1.13.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
    [1:1.13.1-1]
  • 1.13.1 final
    [1:1.13.0-1]
  • 1.13.0 final
    [1:1.13.0-0.rc2]
  • 1.13.0 rc2
    [1:1.13.0-0.rc1]
  • 1.13.0 rc1
    [1:1.12.1-1]
  • 1.12.1
    [1:1.12.0-1]
  • Update to 1.12.0, build with gcc 7.0.
    [1:1.11.2-2]
  • Rebuild for Python 3.6
    [1:1.11.2-1]
  • Update to 1.11.2 final
    [1:1.11.2-0.rc1]
  • Update to 1.11.2rc1, BZ 1340440.
    [1:1.11.1-2]
  • https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
    [1:1.11.1-1]
  • Update to 1.11.1 final
    [1:1.11.1-0.rc1]
  • Update to 1.11.1rc1, BZ 1340440.
    [1:1.11.0-4]
  • Update to 1.11.0 final
    [1:1.11.0-3.rc2]
  • Update to 1.11.0rc2
    [1:1.11.0-2.b3]
  • Bump Release. 1b2 is higher than 0b3
    [1:1.11.0-0.b3]
  • Update to 1.11.0b2, BZ 1306249.
    [1:1.11.0-1b2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
    [1:1.11.0-0.b2]
  • Update to 1.11.0b2, BZ 1303387.
    [1:1.11.0-020161016.cc2b04git]
  • Update to git snapshot (due to build issue) after 1.11.0b1, BZ 1301943.
    [1:1.10.4-1]
  • Update to 1.10.4, BZ 1296509.
    [1:1.10.2-1]
  • Update to 1.10.2, BZ 1291674.
    [1:1.10.2-0.2.rc2]
  • Update to 1.10.2rc1, BZ 1289550.
    [1:1.10.2-0.1.rc1]
  • Update to 1.10.2rc1
  • Drop opt-flags patch applied upstream
    [1:1.10.1-6]
  • Add provides to satisfy numpy%{_isa} requires in other packages
    [1:1.10.1-5]
  • Re-add provides f2py
    [1:1.10.1-4]
  • Fix obsoletes / provides for numpy -> python2-numpy rename
    [1:1.10.1-3]
  • Remove fortran flags or arm would build with -march=x86-64
    [1:1.10.1-2]
  • Provide python2-* packages
  • Run tests with verbose=2
    [1:1.10.1-1]
  • Update to 1.10.1, BZ 1271022.
    [1:1.10.0-2]
  • Rebuilt for Python3.5 rebuild
    [1:1.10.0-1]
  • Update to 1.10.0 final.
    [1:1.10.0-0.b1]
  • Update to 1.10.0b1, BZ 1252641.
    [1:1.9.2-3]
  • Add python2-numpy provides (bug #1249423)
  • Spec cleanup
    [1:1.9.2-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
    [1:1.9.2-1]
  • Update to 1.9.2
    [1:1.9.1-2]
  • Add upstream patch to fix xerbla linkage (bug #1172834)
    [1:1.9.1-1]
  • Update to 1.9.1, BZ 1160273.
    [1:1.9.0-1]
  • Update to 1.9.0
    [1:1.9.0-0.1.rc1]
  • Update to 1.9.0rc1
    [1:1.8.2-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
    [1:1.8.2-1]
  • Update to 1.8.2
    [1:1.8.1-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
    [1:1.8.1-3]
  • Rebuild for Python 3.4
    [1:1.8.1-2]
  • Fixing FTBFS on ppc64le (#1078354)
    [1:1.8.1-1]
  • Update to 1.8.1
    [1:1.8.0-5]
  • Fix pycache ownership (bug #1072467)
    [1:1.8.0-4]
  • Fix CVE-2014-1858, CVE-2014-1859: #1062009, #1062359
    [1:1.8.0-3]
  • Ship doc module (bug #1034357)
    [1:1.8.0-2]
  • Move f2py documentation to f2py package (bug #1027394)
    [1:1.8.0-1]
  • Update to 1.8.0 final
    [1:1.8.0-0.7.rc2]
  • Update to 1.8.0rc2
  • Create clean site.cfg
  • Use serial atlas
    [1:1.8.0-0.6.b2]
  • Add [atlas] to site.cfg for new atlas library names
    [1:1.8.0-0.5.b2]
  • Update site.cfg for new atlas library names
    [1:1.8.0-0.4.b2]
  • rebuild for atlas 3.10
    [1:1.8.0-0.3.b2]
  • Fix libdir path in site.cfg, BZ 1006242.
    [1:1.8.0-0.2.b2]
  • Update to 1.8.0b2
    [1:1.8.0-0.1.b1]
  • Update to 1.8.0b1
  • Drop f2py patch applied upstream
    [1:1.7.1-5]
  • URL Fix, BZ 1001337
    [1:1.7.1-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
    [1:1.7.1-3]
  • Fix rpmlint warnings
  • Update License
  • Apply patch: change shebang of f2py to use binary directly
    [1:1.7.1-2]
  • Specfile cleanup (bug #969854)
    [1:1.7.1-1]
  • Update to 1.7.1
    [1:1.7.0-1]
  • Update to 1.7.0 final
    [1:1.7.0-0.5.rc1]
  • Update to 1.7.0rc1
    [1:1.7.0-0.4.b2]
  • Update to 1.7.0b2
  • Drop patches applied upstream
    [1:1.7.0-0.3.b1]
  • Add patch from github pull 371 to fix python 3.3 pickle issue
  • Remove cython .c source regeneration - fails now
    [1:1.7.0-0.2.b1]
  • add workaround for rhbz#849713 (fixes FTBFS)
    [1:1.7.0-0.1.b1]
  • Update to 1.7.0b1
  • Rebase python 3.3 patchs to current git master
  • Drop patches applied upstream
    [1:1.6.2-5]
  • rework patches for 3.3 to more directly reflect upstream’s commits
  • re-enable test suite on python 3
  • forcibly regenerate Cython .c source to avoid import issues on Python 3.3
    [1:1.6.2-4]
  • rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
  • needs unicode patch
    [1:1.6.2-3]
  • remove rhel logic from with_python3 conditional
    [1:1.6.2-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
    [1:1.6.2-1]
  • Update to 1.6.2 final
    [1:1.6.2rc1-0.1]
  • Update to 1.6.2rc1
    [1:1.6.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
    [1:1.6.1-1]
  • Update to 1.6.1
    [1:1.6.0-2]
  • Bump and rebuild for BZ 712251.
    [1:1.6.0-1]
  • Update to 1.6.0 final
    [1:1.6.0-0.2.b2]
  • Update to 1.6.0b2
  • Drop import patch fixed upstream
    [1:1.6.0-0.1.b1]
  • Update to 1.6.0b1
  • Build python3 module with python3
  • Add patch from upstream to fix build time import error
    [1:1.5.1-1]
  • Update to 1.5.1 final
    [1:1.5.1-0.4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
    [1:1.5.1-0.3]
  • fix the AttributeError during tests
  • fix build on s390(x)
    [1:1.5.1-0.2]
  • rebuild for newer python3
    [1:1.5.1-0.1]
  • update to 1.5.1rc1
  • add python3 subpackage
  • some spec-cleanups
    [1:1.4.1-6]
  • actually add the patch this time
    [1:1.4.1-5]
  • fix segfault within %check on 2.7 (patch 2)
    [1:1.4.1-4]
  • Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
    [1.4.1-3]
  • ignore the ‘Ticket #1299 second test’ failure on s390(x)
    [1.4.1-2]
  • source commit fix
    [1.4.1-1]
  • New upstream release. Include backported doublefree patch
    [1.3.0-8]
  • Moved distutils back to the main package, BZ 572820.
    [1.3.0-7]
  • Reverted to 1.3.0 after upstream pulled 1.4.0, BZ 579065.
    [1.4.0-5]
  • Linking /usr/include/numpy to .h files, BZ 185079.
    [1.4.0-4]
  • Re-enabling atlas BR, dropping lapack Requires.
    [1.4.0-3]
  • Since the previous didn’t work, Requiring lapack.
    [1.4.0-2]
  • Temporarily dropping atlas BR to work around 562577.
    [1.4.0-1]
  • 1.4.0.
  • Dropped ARM patch, ARM support added upstream.
    [1.3.0-6.fa1]
  • Add ARM support
    [1.3.0-6]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
    [1.3.0-5]
  • Fixed atlas BR, BZ 505376.
    [1.3.0-4]
  • EVR bump for pygame chainbuild.
    [1.3.0-3]
  • Moved linalg, fft back to main package.
    [1.3.0-2]
  • Split out f2py into subpackage, thanks Peter Robinson [email protected].
    [1.3.0-1]
  • Update to latest upstream.
  • Fixed Source0 URL.
    [1.3.0-0.rc1]
  • Update to latest upstream.
    [1.2.1-3]
  • Require python-devel, BZ 488464.
    [1.2.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
    [1.2.1-1]
  • Update to 1.2.1.
    [1.2.0-2]
  • Rebuild for Python 2.6
    [1.2.0-1]
  • New upstream release, added python-nose BR. BZ 465999.
  • Using atlas blas, not blas-devel. BZ 461472.
    [1.1.1-1]
  • New upstream release
    [1.1.0-1]
  • New upstream release
    [1.0.4-1]
  • New upstream release
    [1.0.3.1-2]
  • Add python egg to %files on f9+
    [1.0.3.1-1]
  • New upstream release
    [1.0.3-1]
  • New upstream release
    [1.0.2-2]
  • Drop BR: atlas-devel, since it just provides binary-compat
    blas and lapack libs. Atlas can still be optionally used
    at runtime. (Note: this is all per the atlas maintainer).
    [1.0.2-1]
  • New upstream release
    [1.0.1-4]
  • Update gfortran patch to recognize latest gfortran f95 support
  • Resolves rhbz#236444
    [1.0.1-3]
  • Fix up cpuinfo bug (#229753). Upstream bug/change:
    http://projects.scipy.org/scipy/scipy/ticket/349
    [1.0.1-2]
  • Per discussion w/Jose Matos, Obsolete/Provide f2py, as the
    stand-alone one is no longer supported/maintained upstream
    [1.0.1-1]
  • New upstream release
    [1.0-2]
  • Rebuild for python 2.5
    [1.0-1]
  • New upstream release
    [0.9.8-1]
  • New upstream release
    [0.9.6-1]
  • Upstream update
    [0.9.5-1]
  • Upstream update
    [0.9.4-2]
  • Rebuild for Fedora Extras 5
    [0.9.4-1]
  • Initial RPM release
  • Added gfortran patch from Neal Becker
    pytest
    python2-pip
    python2
    [2.7.18-17.0.1]
  • Add Oracle Linux distribution in platform.py [Orabug: 20812544]
    [2.7.18-17]
  • Security fix for CVE-2022-48560
    Resolves: RHEL-16702
    [2.7.18-16]
  • Fix for CVE-2022-48565
    Resolves: RHEL-7088
    python2-rpm-macros
    python2-setuptools
    [39.0.1-14]
  • Fix for CVE-2022-40897
    Resolves: RHEL-9763
    python2-six
    python-attrs
    python-backports
    python-backports-ssl_match_hostname
    python-chardet
    [3.0.4-10]
  • Bumping due to problems with modular RPM upgrade path
  • Resolves: rhbz#1695587
    [3.0.4-9]
  • Remove unversioned binaries from python2 subpackage
  • Resolves: rhbz#1613343
    [3.0.4-8]
  • Switch python3 conditions to bcond
    [3.0.4-7]
  • First version for python27 module
    python-coverage
    [4.5.1-5]
  • Fix the license identifier
  • Resolves: rhbz#2213306
    [4.5.1-4]
  • Bumping due to problems with modular RPM upgrade path
  • Resolves: rhbz#1695587
    [4.5.1-3]
  • Remove unversioned binaries from python2 subpackage
  • Resolves: rhbz#1613343
    [4.5.1-2]
  • Make possible to disable python3 subpackage
    [4.5.1-1]
  • update to 4.5.1
    [4.5-1]
  • update to 4.5
    [4.4.2-1]
  • update to 4.4.2
    [4.4.1-6]
  • Use better Obsoletes for platform-python
    [4.4.1-5]
  • Remove platform-python subpackage
  • Cleanup spec
    [4.4.1-4]
  • Add platform-python subpackage
    [4.4.1-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
    [4.4.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
    [4.4.1-1]
  • update to 4.4.1
    [4.4-1]
  • update to 4.4
    [4.3.3-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
    [4.3.3-1]
  • update to 4.3.3
    [4.3.1-1]
  • update to 4.3.1
    [4.2-2]
  • Rebuild for Python 3.6
    [4.2-1]
  • 4.2 final
    [4.2-0.2.b1]
  • https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
    [4.2-0.1.b1]
  • update to 4.2b1
    [4.1-1]
  • update to 4.1
    [4.1-0.5.b3]
  • update to 4.1b3
    [4.1-0.4.b2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
    [4.1-0.3.b2]
  • update to 4.1b2
    [4.1-0.2.b1]
  • Fix and install license
  • Cleanup and modernize spec
  • Note bundled jquery libraries
    [4.1-0.1.b1]
  • update to 4.1b1
    [4.0.3-1]
  • update to 4.0.3
    [4.0.2-2]
  • Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5
    [4.0.2-1]
  • update to 4.0.2
    [4.0.1-1]
  • update to 4.0.1
    [4.0-1]
  • update to 4.0 final
    [4.0-0.13.b3]
  • Rebuilt for Python3.5 rebuild
    [4.0-0.12.b3]
  • update to 4.0b3
    [4.0-0.11.b2]
  • update to 4.0b2
    [4.0-0.10.b1]
  • update to 4.0b1
    [4.0-0.9.a6]
  • add missing Provides: python2-coverage
    [4.0-0.8.a6]
  • update to 4.0a6
    [4.0-0.7.a5]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
    [4.0-0.6.a5]
  • No longer run 2to3 on the python3 sources.
    [4.0-0.5.a5]
  • unicode fixup
    [4.0-0.4.a5]
  • update to 4.0a5
    [4.0-0.3.a3]
  • update to 4.0a3
    [4.0-0.2.a2]
  • update to 4.0a2
    [4.0-0.1.a]
  • Update to 4.0a1
    [3.7.1-1]
  • Update to 3.7.1 (#1043090)
    [3.7-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
    [3.7-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
    [3.7-2]
  • Rebuild for Python 3.4
    [3.7-1]
  • update to 3.7
  • fix macros for current guidelines
  • rename binary (with compat symlinks)
    [3.6-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
    [3.6-1]
  • update to 3.6 final
    [3.6-0.3.b3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
    [3.6-0.3.b3]
  • update to 3.6beta3
    [3.6-0.1.b1]
  • update to 3.6beta1
  • patch0 merged into upstream
    [3.5.3-2]
  • Patch from upstream for traceback when people use this with python2 and
    python3 in the same directory
    [3.5.3-1]
  • update to 3.5.3
    [3.5.2-0.4.b1]
  • rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
    [3.5.2-0.3.b1]
  • remove rhel logic from with_python3 conditional
    [3.5.2-0.2.b1]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
    [3.5.2-0.1.b1]
  • update to 3.5.2b1
    [3.5.1-0.2.b1]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
    [3.5.1-0.1.b1]
  • update to 3.5.1b1
    [3.5-0.1.b1]
  • update to 3.5b1
    [3.4-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
    [3.4-2]
  • rebuild for newer python3
    [3.4-1]
  • Update to 3.4 (#631751)
    [3.3.1-4]
  • Rebuild against Python 3.2
    [3.3.1-3]
  • Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
    [3.3.1-2]
  • Fix license tag, permissions, and filtering extraneous provides
    [3.3.1-1]
  • Update to 3.3.1
    [3.2-3]
  • add python 3 subpackage (#536948)
    [3.2-2]
  • Require python-setuptools (#556290)
    [3.2-1]
  • update to 3.2
    [3.1-1]
  • Update to 3.1
    [3.0.1-1]
  • update to 3.0.1
    [2.85-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
    [2.85-2]
  • fix install invocation
    [2.85-1]
  • Initial package for Fedora
    python-dns
    python-docs
    [2.7.16-2]
  • Bumping due to problems with modular RPM upgrade path
  • Resolves: rhbz#1695587
    [2.7.16-1]
  • Update to 2.7.16
    Resolves: rhbz#1680967
    [2.7.15-3]
  • Modify for prebuilding and deploying on RHEL8
  • Rename the info page to python2
  • Resolves: rhbz#1656048
    [2.7.15-2]
  • Modify for building on RHEL8
  • Disable the tests, because the linkchecker package isn’t available in RHEL8
  • Resolves: rhbz#1656048
    [2.7.15-1]
  • Update to 2.7.15
    [2.7.14-5]
  • Only recommend the python2 package
    [2.7.14-4]
  • Remove Obsoletes tag from when python was renamed to python2 (Fedora 25 was last)
    [2.7.14-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
    [2.7.14-2]
  • Fix ambiguous Python 2 dependencies declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
    [2.7.14-1]
  • Update to 2.7.14
    [2.7.13-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
    [2.7.13-3]
  • Change fixed Obsoletes version with a dynamic one (rhbz#1457336)
    [2.7.13-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
    [2.7.13-1]
  • Update to 2.7.13
  • Rename package to python2-docs
    [2.7.12-2]
  • Remove unversioned Obsoletes.
    [2.7.12-1]
  • Update to 2.7.12.
    [2.7.11-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
    [2.7.11-1]
  • Update to 2.7.11
    [2.7.10-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
    [2.7.10-1]
  • Update to 2.7.10
    [2.7.9-1]
  • Update to 2.7.9
    [2.7.8-1]
  • Update to 2.7.8
    [2.7.7-1]
  • Update to 2.7.7
    [2.7.6-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
    [2.7.6-1]
  • Updated to v2.7.6
    [2.7.5-6]
  • Used _pkgdocdir instead of _docdir
    [2.7.5-5]
  • Small tweaks of Suvayu’s patch
    [2.7.5-4]
  • Enable Texinfo builder, add subpackage with python info pages
    [2.7.5-3]
  • Spec cleanup
    [2.7.5-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
    [2.7.5-1]
  • Version 2.7.5.
    [2.7.4-1]
  • Version 2.7.4.
    [2.7.3-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
    [2.7.3-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
    [2.7.3-2]
  • make link checking optional, to avoid needing to pull in linkchecker and
    its dependencies (rbhz#823930)
    [2.7.3-1]
  • 2.7.3
    [2.7.2-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
    [2.7.2-2]
  • fix broken link to ‘Global Module Index’, and add a %check, verifying the
    absence of broken links (rhbz#670493)
    [2.7.2-1]
  • 2.7.2
    [2.7.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
    [2.7.1-1]
  • 2.7.1
    [2.7-1]
  • Update to 2.7
    [2.6.5-1]
  • move to 2.6.5: http://www.python.org/download/releases/2.6.5/
    [2.6.4-3]
  • fix %description (bug #559710)
    [2.6.4-2]
  • update sources for 2.6.4
    [2.6.4-1]
  • move to 2.6.4
  • drop build requirement on python-jinja; python-sphinx requires python-jinja2
    (bug 532135)
    [2.6.2-1]
  • Move to 2.6.2 like python itself.
    [2.6-5]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
    [2.6-4]
  • Fix import error (#511647)
    [2.6-3]
  • Spec file cleanup (#226341)
    [2.6-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
    [2.6-1]
  • Update to 2.6
    [2.5.2-1]
  • Move to 2.5.2 like python itself.
    [2.5.1-3]
  • fix license tag
    [2.5.1-2]
  • mkdir a build root to keep recent rpm/mock happy.
    [2.5.1-1]
  • update to 2.5.1
    [2.5-1]
  • update to 2.5
    [2.4.4-1]
  • update to 2.4.4
    [2.4.3-1.1]
  • rebuild
    [2.4.3-1]
  • updated to 2.4.3
  • Fri Dec 09 2005 Jesse Keating

    • Prevent tree cycle creation when adding Elements as siblings.
    • LP#1361948: crash when deallocating Element siblings without parent.
    • LP#1354652: crash when traversing internally loaded documents in XSLT
  • extension functions.
  • Sun Aug 17 2014 Fedora Release Engineering

    • HTML cleaning could fail to strip javascript links that mix control
  • characters into the link scheme.
    [3.3.4-1]
  • 3.3.4 (2014-04-03)
  • ==================
  • Features added

    • Source line numbers above 65535 are available on Elements when
  • using libxml2 2.9 or later.
  • Bugs fixed

    • lxml.html.fragment_fromstring() failed for bytes input in Py3.
      [3.3.3-4]
  • Fix macro definition
    [3.3.3-3]
  • Add python3-cssselect to correct package
    [3.3.3-3]
  • python3-cssselect is not available on F19
    [3.3.3-2]
  • BZ#1075070 add requires and buildrequires for cssselect
    [3.3.3-1]
  • 3.3.3 (2014-03-04)
  • ==================
  • Bugs fixed

    • LP#1287118: Crash when using Element subtypes with slots.
  • Other changes

    • The internal classes _LogEntry and _Attrib can no longer be
  • subclassed from Python code.
    [3.3.2-2]
  • Add check section #1075070
    [3.3.2-1]
  • 3.3.2 (2014-02-26)
  • ==================
  • Bugs fixed

    • The properties resolvers and version, as well as the methods
  • set_element_class_lookup() and makeelement(), were lost from
  • iterparse objects.
    • LP#1222132: instances of XMLSchema, Schematron and RelaxNG
  • did not clear their local error_log before running a validation.
    • LP#1238500: lxml.doctestcompare mixed up ‘expected’ and ‘actual’ in
  • attribute values.
    • Some file I/O tests were failing in MS-Windows due to incorrect temp
  • file usage. Initial patch by Gabi Davar.
    • LP#910014: duplicate IDs in a document were not reported by DTD
  • validation.
    • LP#1185332: tostring(method=‘html’) did not use HTML serialisation
  • semantics for trailing tail text. Initial patch by Sylvain Viollon.
    • LP#1281139: .attrib value of Comments lost its mutation methods
  • in 3.3.0. Even though it is empty and immutable, it should still
  • provide the same interface as that returned for Elements.
    [3.3.2-1]
  • 3.3.1 (2014-02-12)
  • ==================
  • Bugs fixed

    • LP#1014290: HTML documents parsed with parser.feed() failed to find
  • elements during tag iteration.
    • LP#1273709: Building in PyPy failed due to missing support for
  • PyUnicode_Compare() and PyByteArray_*() in PyPy’s C-API.
    • LP#1274413: Compilation in MSVC failed due to missing ‘stdint.h’ standard
  • header file.
    • LP#1274118: iterparse() failed to parse BOM prefixed files.
      [3.3.0-2]
  • Update Cython requirement to >= 0.20
    [3.3.0-1]
  • 3.3.0 (2014-01-26)
  • ==================
  • Features added

  • Bugs fixed

    • The heuristic that distinguishes file paths from URLs was tightened
  • to produce less false negatives.
  • Other changes

  • 3.3.0beta5 (2014-01-18)
  • =======================
  • Features added

    • The PEP 393 unicode parsing support gained a fallback for wchar strings
  • which might still be somewhat common on Windows systems.
  • Bugs fixed

    • Several error handling problems were fixed throughout the code base that
  • could previously lead to exceptions being silently swallowed or not
  • properly reported.
    • The C-API function appendChild() is now deprecated as it does not
  • propagate exceptions (its return type is void). The new function
  • appendChildToElement() was added as a safe replacement.
    • Passing a string into fromstringlist() raises an exception instead of
  • parsing the string character by character.
  • Other changes

    • Document cleanup code was simplified using the new GC features in
  • Cython 0.20.
  • 3.3.0beta4 (2014-01-12)
  • =======================
  • Features added

  • Bugs fixed

    • The (empty) value returned by the attrib property of Entity and
  • Comment objects was mutable.
    • Element class lookup wasn’t available for the new pull parsers or when
  • using a custom parser target.
    • Setting Element attributes on instantiation with both the attrib
  • argument and keyword arguments could modify the mapping passed as
  • attrib.
    • LP#1266171: DTDs instantiated from internal/external subsets (i.e.
  • through the docinfo property) lost their attribute declarations.
  • Other changes

    • Built with Cython 0.20pre (gitrev 012ae82eb) to prepare support for
  • Python 3.4.
  • 3.3.0beta3 (2014-01-02)
  • =======================
  • Features added

    • Unicode string parsing was optimised for Python 3.3 (PEP 393).
  • Bugs fixed

    • HTML parsing of Unicode strings could misdecode the input on some
  • platforms.
    • Crash in xmlfile() when closing open elements out of order in an error
  • case.
  • Other changes

  • 3.3.0beta2 (2013-12-20)
  • =======================
  • Features added

    • iterparse() supports the recover option.
  • Bugs fixed

    • Crash in iterparse() for HTML parsing.
    • Crash in target parsing with attributes.
  • Other changes

    • The safety check in the read-only tree implementation (e.g. used by
  • PythonElementClassLookup) raises a more appropriate
  • ReferenceError for illegal access after tree disposal instead of
  • an AssertionError. This should only impact test code that
  • specifically checks the original behaviour.
  • 3.3.0beta1 (2013-12-12)
  • =======================
  • Features added

    • New option handle_failures in make_links_absolute() and
  • resolve_base_href() (lxml.html) that enables ignoring or
  • discarding links that fail to parse as URLs.
    • New parser classes XMLPullParser and HTMLPullParser for
  • incremental parsing, as implemented for ElementTree in Python 3.4.
    • iterparse() enables recovery mode by default for HTML parsing
  • (html=True).
  • Bugs fixed

    • LP#1255132: crash when trying to run validation over non-Element (e.g.
  • comment or PI).
    • Error messages in the log and in exception messages that originated
  • from libxml2 could accidentally be picked up from preceding warnings
  • instead of the actual error.
    • The ElementMaker in lxml.objectify did not accept a dict as
  • argument for adding attributes to the element it’s building. This
  • works as in lxml.builder now.
    • LP#1228881: repr(XSLTAccessControl) failed in Python 3.
    • Raise ValueError when trying to append an Element to itself or
  • to one of its own descendants, instead of running into an infinite
  • loop.
    • LP#1206077: htmldiff discarded whitespace from the output.
    • Compressed plain-text serialisation to file-like objects was broken.
    • lxml.html.formfill: Fix textarea form filling.
  • The textarea used to be cleared before the new content was set,
  • which removed the name attribute.
  • Other changes

    • Some basic API classes use freelists internally for faster
  • instantiation. This can speed up some iterparse() scenarios,
  • for example.
    • iterparse() was rewritten to use the new *PullParser
  • classes internally instead of being a parser itself.
    [3.2.4-1]
  • 3.2.4 (2013-11-07)
  • ==================
  • Bugs fixed

    • Memory leak when creating an XPath evaluator in a thread.
    • LP#1228881: repr(XSLTAccessControl) failed in Python 3.
    • Raise ValueError when trying to append an Element to itself or
  • to one of its own descendants.
    • LP#1206077: htmldiff discarded whitespace from the output.
    • Compressed plain-text serialisation to file-like objects was broken.
      [3.2.3-2]
  • Add requirement for on python-cssselect for the python2 version
    [3.2.3-1]
  • and here’s a version 3.2.3. The last release accidentally lost the ability
  • to work on Python 2.4. There are no other changes over 3.2.2.
  • 3.2.2 (2013-07-28)
  • ==================
  • Features added

  • Bugs fixed

    • LP#1185701: spurious XMLSyntaxError after finishing iterparse().
    • Crash in lxml.objectify during xsi annotation.
  • Other changes

    • Return values of user provided element class lookup methods are now
  • validated against the type of the XML node they represent to prevent
  • API class mismatches.
    [3.2.1-1]
  • 3.2.1 (2013-05-11)
  • ==================
  • Features added

    • The methods apply_templates() and process_children() of XSLT
  • extension elements have gained two new boolean options elements_only
  • and remove_blank_text that discard either all strings or
  • whitespace-only strings from the result list.
  • Bugs fixed

    • When moving Elements to another tree, the namespace cleanup mechanism
  • no longer drops namespace prefixes from attributes for which it finds
  • a default namespace declaration, to prevent them from appearing as
  • unnamespaced attributes after serialisation.
    • Returning non-type objects from a custom class lookup method could lead
  • to a crash.
    • Instantiating and using subtypes of Comments and ProcessingInstructions
  • crashed.
    [3.2.0-1]
  • 3.2.0 (2013-04-28)
  • ==================
  • Features added

  • Bugs fixed

    • LP#690319: Leading whitespace could change the behaviour of the string
  • parsing functions in lxml.html.
    • LP#599318: The string parsing functions in lxml.html are more robust
  • in the face of uncommon HTML content like framesets or missing body tags.
  • Patch by Stefan Seelmann.
    • LP#712941: I/O errors while trying to access files with paths that
  • contain non-ASCII characters could raise UnicodeDecodeError instead
  • of properly reporting the IOError.
    • LP#673205: Parsing from in-memory strings disabled network access in the
  • default parser and made subsequent attempts to parse from a URL fail.
    • LP#971754: lxml.html.clean appends ‘nofollow’ to ‘rel’ attributes instead
  • of overwriting the current value.
    • LP#715687: lxml.html.clean no longer discards scripts that are explicitly
  • allowed by the user provided whitelist. Patch by Christine Koppelt.
  • 3.1.2 (2013-04-12)
  • ==================
  • Bugs fixed

    • LP#1136509: Passing attributes through the namespace-unaware API of
  • the sax bridge (i.e. the handler.startElement() method) failed
  • with a TypeError. Patch by Mike Bayer.
    • LP#1123074: Fix serialisation error in XSLT output when converting
  • the result tree to a Unicode string.
    • GH#105: Replace illegal usage of xmlBufLength() in libxml2 2.9.0
  • by properly exported API function xmlBufUse().
  • 3.1.1 (2013-03-29)
  • ==================
  • Features added

  • Bugs fixed

    • LP#1160386: Write access to lxml.html.FormElement.fields raised
  • an AttributeError in Py3.
    • Illegal memory access during cleanup in incremental xmlfile writer.
  • Other changes

    • The externally useless class lxml.etree._BaseParser was removed
  • from the module dict.
    [3.1.0-1]
  • 3.1.0 (2013-02-10)
  • ==================
  • Features added

    • GH#89: lxml.html.clean allows overriding the set of attributes that it
  • considers ‘safe’. Patch by Francis Devereux.
  • Bugs fixed

    • LP#1104370: copy.copy(el.attrib) raised an exception. It now returns
  • a copy of the attributes as a plain Python dict.
    • GH#95: When used with namespace prefixes, the el.find*() methods
  • always used the first namespace mapping that was provided for each
  • path expression instead of using the one that was actually passed
  • in for the current run.
    • LP#1092521, GH#91: Fix undefined C symbol in Python runtimes compiled
  • without threading support. Patch by Ulrich Seidl.
  • Other changes

  • 3.1beta1 (2012-12-21)
  • =====================
  • Features added

    • New build-time option --with-unicode-strings for Python 2 that
  • makes the API always return Unicode strings for names and text
  • instead of byte strings for plain ASCII content.
    • New incremental XML file writing API etree.xmlfile().
    • E factory in lxml.objectify is callable to simplify the creation of
  • tags with non-identifier names without having to resort to getattr().
  • Bugs fixed

    • When starting from a non-namespaced element in lxml.objectify, searching
  • for a child without explicitly specifying a namespace incorrectly found
  • namespaced elements with the requested local name, instead of restricting
  • the search to non-namespaced children.
    • GH#85: Deprecation warnings were fixed for Python 3.x.
    • GH#33: lxml.html.fromstring() failed to accept bytes input in Py3.
    • LP#1080792: Static build of libxml2 2.9.0 failed due to missing file.
  • Other changes

    • The externally useless class _ObjectifyElementMakerCaller was
  • removed from the module API of lxml.objectify.
    • LP#1075622: lxml.builder is faster for adding text to elements with
  • many children. Patch by Anders Hammarquist.
    [3.0.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
    [3.0.1-1]
  • 3.0.1 (2012-10-14)
  • Bugs fixed
    • LP#1065924: Element proxies could disappear during garbage collection
  • in PyPy without proper cleanup.
    • GH#71: Failure to work with libxml2 2.6.x.
    • LP#1065139: static MacOS-X build failed in Py3.
      [3.0-1]
  • 3.0 (2012-10-08)
  • ================
  • Features added

  • Bugs fixed

    • End-of-file handling was incorrect in iterparse() when reading from
  • a low-level C file stream and failed in libxml2 2.9.0 due to its
  • improved consistency checks.
  • Other changes

    • The build no longer uses Cython by default unless the generated C files
  • are missing. To use Cython, pass the option ‘–with-cython’. To ignore
  • the fatal build error when Cython is required but not available (e.g. to
  • run special setup.py commands that do not actually run a build), pass
  • ‘–without-cython’.
  • 3.0beta1 (2012-09-26)
  • =====================
  • Features added

    • Python level access to (optional) libxml2 memory debugging features
  • to simplify debugging of memory leaks etc.
  • Bugs fixed

    • Fix a memory leak in XPath by switching to Cython 0.17.1.
    • Some tests were adapted to work with PyPy.
  • Other changes

    • The code was adapted to work with the upcoming libxml2 2.9.0 release.
  • 3.0alpha2 (2012-08-23)
  • ======================
  • Features added

    • The .iter() method of elements now accepts tag arguments like ‘{*}name’
  • to search for elements with a given local name in any namespace. With
  • this addition, all combinations of wildcards now work as expected:
  • ‘{ns}name’, ‘{}name’, ‘{}name’, '{ns}’, ‘{}’ and '{}*’. Note that
  • ‘name’ is equivalent to ‘{}name’, but ‘’ is '{}*’. The same change
  • applies to the .getiterator(), .itersiblings(), .iterancestors(),
  • .iterdescendants(), .iterchildren() and .itertext() methods, the
  • strip_attributes(), strip_elements() and strip_tags() functions as well
  • as the iterparse() function.
    • C14N allows specifying the inclusive prefixes to be promoted to
  • top-level during exclusive serialisation.
  • Bugs fixed

    • Passing long Unicode strings into the feed() parser interface failed to
  • read the entire string.
  • Other changes

  • 3.0alpha1 (2012-07-31)
  • ======================
  • Features added

    • Initial support for building in PyPy (through cpyext).
    • DTD objects gained an API that allows read access to their
  • declarations.
    • xpathgrep.py gained support for parsing line-by-line (e.g.
  • from grep output) and for surrounding the output with a new root
  • tag.
    • E-factory in lxml.builder accepts subtypes of known data
  • types (such as string subtypes) when building elements around them.
    • Tree iteration and iterparse() with a selective tag
  • argument supports passing a set of tags. Tree nodes will be
  • returned by the iterators if they match any of the tags.
  • Bugs fixed

    • The .find*() methods in lxml.objectify no longer use XPath
  • internally, which makes them faster in many cases (especially when
  • short circuiting after a single or couple of elements) and fixes
  • some behavioural differences compared to lxml.etree. Note that
  • this means that they no longer support arbitrary XPath expressions
  • but only the subset that the ElementPath language supports.
  • The previous implementation was also redundant with the normal
  • XPath support, which can be used as a replacement.
    • el.find(‘*’) could accidentally return a comment or processing
  • instruction that happened to be in the wrong spot. (Same for the
  • other .find*() methods.)
    • The error logging is less intrusive and avoids a global setup where
  • possible.
    • Fixed undefined names in html5lib parser.
    • Element.attrib.update() did not accept an attrib of
  • another Element as parameter.
    • For subtypes of ElementBase that make the .text or .tail
  • properties immutable (as in objectify, for example), inserting text
  • when creating Elements through the E-Factory feature of the class
  • constructor would fail with an exception, stating that the text
  • cannot be modified.
  • Other changes

    • The code base was overhauled to properly use ‘const’ where the API
  • of libxml2 and libxslt requests it. This also has an impact on the
  • public C-API of lxml itself, as defined in etreepublic.pxd, as
  • well as the provided declarations in the lxml/includes/ directory.
  • Code that uses these declarations may have to be adapted. On the
  • plus side, this fixes several C compiler warnings, also for user
  • code, thus making it easier to spot real problems again.
    • The functionality of ‘lxml.cssselect’ was moved into a separate PyPI
  • package called ‘cssselect’. To continue using it, you must install
  • that package separately. The ‘lxml.cssselect’ module is still
  • available and provides the same interface, provided the ‘cssselect’
  • package can be imported at runtime.
    • Element attributes passed in as an attrib dict or as keyword
  • arguments are now sorted by (namespaced) name before being created
  • to make their order predictable for serialisation and iteration.
  • Note that adding or deleting attributes afterwards does not take
  • that order into account, i.e. setting a new attribute appends it
  • after the existing ones.
    • Several classes that are for internal use only were removed
  • from the lxml.etree module dict:
  • _InputDocument, _ResolverRegistry, _ResolverContext, _BaseContext,
  • _ExsltRegExp, _IterparseContext, _TempStore, _ExceptionContext,
  • __ContentOnlyElement, _AttribIterator, _NamespaceRegistry,
  • _ClassNamespaceRegistry, _FunctionNamespaceRegistry,
  • _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
  • _FileReaderContext, _ParserContext, _PythonSaxParserTarget,
  • _TargetParserContext, _ReadOnlyProxy, _ReadOnlyPIProxy,
  • _ReadOnlyEntityProxy, _ReadOnlyElementProxy, _OpaqueNodeWrapper,
  • _OpaqueDocumentWrapper, _ModifyContentOnlyProxy,
  • _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
  • _AppendOnlyElementProxy, _SaxParserContext, _FilelikeWriter,
  • _ParserSchemaValidationContext, _XPathContext,
  • _XSLTResolverContext, _XSLTContext, _XSLTQuotedStringParam
    • Several internal classes can no longer be inherited from:
  • _InputDocument, _ResolverRegistry, _ExsltRegExp, _ElementUnicodeResult,
  • _IterparseContext, _TempStore, _AttribIterator, _ClassNamespaceRegistry,
  • _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
  • _FileReaderContext, _PythonSaxParserTarget, _TargetParserContext,
  • _ReadOnlyPIProxy, _ReadOnlyEntityProxy, _OpaqueDocumentWrapper,
  • _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
  • _AppendOnlyElementProxy, _FilelikeWriter, _ParserSchemaValidationContext,
  • _XPathContext, _XSLTResolverContext, _XSLTContext,
  • _XSLTQuotedStringParam, _XSLTResultTree, _XSLTProcessingInstruction
    [2.3.5-1]
  • Bugs fixed
    • Crash when merging text nodes in element.remove().
    • Crash in sax/target parser when reporting empty doctype.
      [2.3.4-1]
  • Bugs fixed
    • Crash when building an nsmap (Element property) with empty namespace
  • URIs.
    • Crash due to race condition when errors (or user messages) occur during
  • threaded XSLT processing (or compilation).
    • XSLT stylesheet compilation could ignore compilation errors.
      [2.3.3-4]
  • rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
    [2.3.3-3]
  • remove rhel logic from with_python3 conditional
    [2.3.3-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
    [2.3.3-1]
  • 2.3.3 (2012-01-04)
  • Features added
    • lxml.html.tostring() gained new serialisation options with_tail and
  • doctype.
  • Bugs fixed
    • Fixed a crash when using iterparse() for HTML parsing and requesting
  • start events.
    • Fixed parsing of more selectors in cssselect. Whitespace before pseudo-
  • elements and pseudo-classes is significant as it is a descendant
  • combinator. ‘E :pseudo’ should parse the same as ‘E *:pseudo’, not
  • ‘E:pseudo’. Patch by Simon Sapin.
    • lxml.html.diff no longer raises an exception when hitting ‘img’ tags
  • without ‘src’ attribute.
    [2.3.2-1]
  • 2.3.2 (2011-11-11)
  • Features added
    • lxml.objectify.deannotate() has a new boolean option
  • cleanup_namespaces to remove the objectify namespace declarations
    
  • (and generally clean up the namespace declarations) after removing
    
  • the type annotations.
    
    • lxml.objectify gained its own SubElement() function as a copy of
  • etree.SubElement to avoid an otherwise redundant import of
    
  • lxml.etree on the user side.
    
  • Bugs fixed
    • Fixed the ‘descendant’ bug in cssselect a second time (after a first
  •  fix in lxml 2.3.1). The previous change resulted in a serious
    
  •  performance regression for the XPath based evaluation of the
    
  •  translated expression. Note that this breaks the usage of some
    
  •  of the generated XPath expressions as XSLT location paths that
    
  •  previously worked in 2.3.1.
    
    • Fixed parsing of some selectors in cssselect. Whitespace after
  •  combinators '>', '+' and '~' is now correctly ignored. Previously
    
  •  it was parsed as a descendant combinator. For example, 'div> .foo'
    
  •  was parsed the same as 'div>* .foo' instead of 'div>.foo'. Patch by
    
  •  Simon Sapin.
    

[2.3.1-1]

  • Features added

    • New option kill_tags in lxml.html.clean to remove specific
  • tags and their content (i.e. their whole subtree).
    • pi.get() and pi.attrib on processing instructions to parse
  • pseudo-attributes from the text content of processing instructions.
    • lxml.get_include() returns a list of include paths that can be
  • used to compile external C code against lxml.etree. This is
  • specifically required for statically linked lxml builds when code
  • needs to compile against the exact same header file versions as lxml
  • itself.
    • Resolver.resolve_file() takes an additional option
  • close_file that configures if the file(-like) object will be
  • closed after reading or not. By default, the file will be closed,
  • as the user is not expected to keep a reference to it.
  • Bugs fixed

    • HTML cleaning didn’t remove ‘data:’ links.
    • The html5lib parser integration now uses the ‘official’
  • implementation in html5lib itself, which makes it work with newer
  • releases of the library.
    • In lxml.sax, endElementNS() could incorrectly reject a plain
  • tag name when the corresponding start event inferred the same plain
  • tag name to be in the default namespace.
    • When an open file-like object is passed into parse() or
  • iterparse(), the parser will no longer close it after use. This
  • reverts a change in lxml 2.3 where all files would be closed. It is
  • the users responsibility to properly close the file(-like) object,
  • also in error cases.
    • Assertion error in lxml.html.cleaner when discarding top-level elements.
    • In lxml.cssselect, use the xpath ‘A//B’ (short for
  • ‘A/descendant-or-self::node()/B’) instead of ‘A/descendant::B’ for the
  • css descendant selector (‘A B’). This makes a few edge cases to be
  • consistent with the selector behavior in WebKit and Firefox, and makes
  • more css expressions valid location paths (for use in xsl:template
  • match).
  • [tags no longer show up in the
  • collected form values.
  • [values to/from a multiple select form
  • field properly selects them and unselects them.
  • Other changes

    • Static builds can specify the download directory with the
  • –download-dir option.
    [2.3-1]
  • 2.3 (2011-02-06)
  • ================
  • Features added

    • When looking for children, lxml.objectify takes ‘{}tag’ as
  • meaning an empty namespace, as opposed to the parent namespace.
  • Bugs fixed

    • When finished reading from a file-like object, the parser
  • immediately calls its .close() method.
    • When finished parsing, iterparse() immediately closes the input
  • file.
    • Work-around for libxml2 bug that can leave the HTML parser in a
  • non-functional state after parsing a severly broken document (fixed
  • in libxml2 2.7.8).
    • marque tag in HTML cleanup code is correctly named marquee.
  • Other changes

    • Some public functions in the Cython-level C-API have more explicit
  • return types.
  • 2.3beta1 (2010-09-06)
  • =====================
  • Features added

  • Bugs fixed

    • Crash in newer libxml2 versions when moving elements between
  • documents that had attributes on replaced XInclude nodes.
    • XMLID() function was missing the optional parser and
  • base_url parameters.
    • Searching for wildcard tags in iterparse() was broken in Py3.
    • lxml.html.open_in_browser() didn’t work in Python 3 due to the
  • use of os.tempnam. It now takes an optional ‘encoding’ parameter.
  • Other changes

  • 2.3alpha2 (2010-07-24)
  • ======================
  • Features added

  • Bugs fixed

    • Crash in XSLT when generating text-only result documents with a
  • stylesheet created in a different thread.
  • Other changes

    • repr() of Element objects shows the hex ID with leading 0x
  • (following ElementTree 1.3).
  • 2.3alpha1 (2010-06-19)
  • ======================
  • Features added

    • Keyword argument namespaces in lxml.cssselect.CSSSelector()
  • to pass a prefix-to-namespace mapping for the selector.
    • New function lxml.etree.register_namespace(prefix, uri) that
  • globally registers a namespace prefix for a namespace that newly
  • created Elements in that namespace will use automatically. Follows
  • ElementTree 1.3.
    • Support ‘unicode’ string name as encoding parameter in
  • tostring(), following ElementTree 1.3.
    • Support ‘c14n’ serialisation method in ElementTree.write() and
  • tostring(), following ElementTree 1.3.
    • The ElementPath expression syntax (el.find*()) was extended to
  • match the upcoming ElementTree 1.3 that will ship in the standard
  • library of Python 3.2/2.7. This includes extended support for
  • predicates as well as namespace prefixes (as known from XPath).
    • During regular XPath evaluation, various ESXLT functions are
  • available within their namespace when using libxslt 1.1.26 or later.
    • Support passing a readily configured logger instance into
  • PyErrorLog, instead of a logger name.
    • On serialisation, the new doctype parameter can be used to
  • override the DOCTYPE (internal subset) of the document.
    • New parameter output_parent to XSLTExtension.apply_templates()
  • to append the resulting content directly to an output element.
    • XSLTExtension.process_children() to process the content of the
  • XSLT extension element itself.
    • ISO-Schematron support based on the de-facto Schematron reference
  • ‘skeleton implementation’.
    • XSLT objects now take XPath object as call stylesheet
  • parameters.
    • Enable path caching in ElementPath (el.find*()) to avoid parsing
  • overhead.
    • Setting the value of a namespaced attribute always uses a prefixed
  • namespace instead of the default namespace even if both declare the
  • same namespace URI. This avoids serialisation problems when an
  • attribute from a default namespace is set on an element from a
  • different namespace.
    • XSLT extension elements: support for XSLT context nodes other than
  • elements: document root, comments, processing instructions.
    • Support for strings (in addition to Elements) in node-sets returned
  • by extension functions.
    • Forms that lack an action attribute default to the base URL of
  • the document on submit.
    • XPath attribute result strings have an attrname property.
    • Namespace URIs get validated against RFC 3986 at the API level
  • (required by the XML namespace specification).
    • Target parsers show their target object in the .target property
  • (compatible with ElementTree).
  • Bugs fixed

    • API is hardened against invalid proxy instances to prevent crashes
  • due to incorrectly instantiated Element instances.
    • Prevent crash when instantiating CommentBase and friends.
    • Export ElementTree compatible XML parser class as
  • XMLTreeBuilder, as it is called in ET 1.2.
    • ObjectifiedDataElements in lxml.objectify were not hashable. They
  • now use the hash value of the underlying Python value (string,
  • number, etc.) to which they compare equal.
    • Parsing broken fragments in lxml.html could fail if the fragment
  • contained an orphaned closing ’

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.5%