[Bug 1201745] Re: python-lxml Precise package needs updating after libxml2 security patch

[Lars Butler]

Probably the package needs to include this patch, to fix the crash noted
in the bug report:
https://github.com/lxml/lxml/commit/19f0a477c935b402c93395f8c0cb561646f4bdc3

@scoder, is that correct?

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to lxml in Ubuntu.
https://bugs.launchpad.net/bugs/1201745

Title:
  python-lxml Precise package needs updating after libxml2 security
  patch

Status in “lxml” package in Ubuntu:
  Confirmed

Bug description:
  $ lsb_release -rd
  Description:	Ubuntu 12.04.2 LTS
  Release:	12.04
  $ apt-cache policy python-lxml
  python-lxml:
    Installed: 2.3.2-1
    Candidate: 2.3.2-1
    Version table:
   *** 2.3.2-1 0
          500 http://it.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages
          100 /var/lib/dpkg/status
  $ apt-cache policy libxml2
  libxml2:
    Installed: 2.7.8.dfsg-5.1ubuntu4.5
    Candidate: 2.7.8.dfsg-5.1ubuntu4.5
    Version table:
   *** 2.7.8.dfsg-5.1ubuntu4.5 0
          500 http://it.archive.ubuntu.com/ubuntu/ precise-updates/main amd64 Packages
          500 http://security.ubuntu.com/ubuntu/ precise-security/main amd64 Packages
          100 /var/lib/dpkg/status
       2.7.8.dfsg-5.1ubuntu4 0
          500 http://it.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages

  ---------

  All of the details--including a script to reproduce the error--are in
  https://bugs.launchpad.net/lxml/+bug/1201735. I initially filed the
  bug here, but, as there is already a fix, this seems to be a packaging
  issue now.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxml/+bug/1201745/+subscriptions