#47319 python-lxml is vulnerable to CVE-2021-28957

Received: (at control) by debbugs.gnu.org; 22 Mar 2021 14:10:29 +0000
From debbugs-submit-bounces@debbugs.gnu.org Mon Mar 22 10:10:29 2021
Received: from localhost ([127.0.0.1]:58196 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1lOLGH-0007eD-8x
	for submit@debbugs.gnu.org; Mon, 22 Mar 2021 10:10:29 -0400
Received: from mail.zaclys.net ([178.33.93.72]:39349)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <lle-bout@zaclys.net>) id 1lOLGF-0007e0-Ld
 for control@debbugs.gnu.org; Mon, 22 Mar 2021 10:10:28 -0400
Received: from guix-xps.local (lsl43-1_migr-78-195-19-20.fbx.proxad.net
 [78.195.19.20] (may be forged)) (authenticated bits=0)
 by mail.zaclys.net (8.14.7/8.14.7) with ESMTP id 12MEALTE000988
 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO)
 for <control@debbugs.gnu.org>; Mon, 22 Mar 2021 15:10:21 +0100
DMARC-Filter: OpenDMARC Filter v1.3.2 mail.zaclys.net 12MEALTE000988
Authentication-Results: mail.zaclys.net;
 dmarc=fail (p=reject dis=none) header.from=zaclys.net
Authentication-Results: mail.zaclys.net;
 spf=fail smtp.mailfrom=lle-bout@zaclys.net
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zaclys.net;
 s=default; t=1616422221;
 bh=WQUkSoYQ8a+SHgJo4WFKzUzCelpklXmz/im4QNCna+k=;
 h=Subject:From:To:Date:From;
 b=nH7RLcQvIYoyo+HRftFbzkZqU+1OC/lrrmcjTo8gAOxSMiVcVhspsFhDSR3SG/H7F
 MsuA2lT1UBQu/YHrFGKwFSUN1zSkGUadb+QgggDBlfYGiHQjBdzHH00FL4nqzLn5jb
 3JGVGwtBXLzu9A6I8AkJHTpZr8pYK7TVJnXjni/w=
Message-ID: <0fece03a442059eec9966ab9e1de32d02df89b81.camel@zaclys.net>
Subject: 
From: Léo Le Bouter <lle-bout@zaclys.net>
To: control@debbugs.gnu.org
Date: Mon, 22 Mar 2021 15:10:21 +0100
Content-Type: multipart/signed; micalg="pgp-sha512";
 protocol="application/pgp-signature"; boundary="=-j7SQJinwLXMUgZPa6l2z"
User-Agent: Evolution 3.34.2 
MIME-Version: 1.0
X-Spam-Score: 2.9 (++)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  tags 47319 + security quit 
 Content analysis details:   (2.9 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.0 SPF_PASS               SPF: sender matches SPF record
 0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
 2.0 BLANK_SUBJECT          Subject is present but empty
 0.9 BODY_EMPTY             No body text in message
X-Debbugs-Envelope-To: control
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: 1.9 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 
 Content preview:  tags 47319 + security quit 
 
 Content analysis details:   (1.9 points, 10.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
 -1.0 MAILING_LIST_MULTI     Multiple indicators imply a widely-seen list
                             manager
  2.0 BLANK_SUBJECT          Subject is present but empty
  0.9 BODY_EMPTY             No body text in message