---
- branch: MAIN
  date: Thu Dec 15 23:22:04 UTC 2022
  files:
  - new: '1.88'
    old: '1.87'
    path: pkgsrc/textproc/py-lxml/Makefile
    pathrev: pkgsrc/textproc/py-lxml/Makefile@1.88
    type: modified
  - new: '1.15'
    old: '1.14'
    path: pkgsrc/textproc/py-lxml/PLIST
    pathrev: pkgsrc/textproc/py-lxml/PLIST@1.15
    type: modified
  - new: '1.66'
    old: '1.65'
    path: pkgsrc/textproc/py-lxml/distinfo
    pathrev: pkgsrc/textproc/py-lxml/distinfo@1.66
    type: modified
  id: 20221215T232204Z.3e6af62283b4086392b45902cd9cb0166790d469
  log: |
    py-lxml: updated to 4.9.2

    4.9.2 (2022-12-13)
    ==================

    Bugs fixed
    ----------

    * CVE-2022-2309: A Bug in libxml2 2.9.1[0-4] could let namespace declarations
      from a failed parser run leak into later parser runs.  This bug was worked around
      in lxml and resolved in libxml2 2.10.0.
      https://gitlab.gnome.org/GNOME/libxml2/-/issues/378

    Other changes
    -------------

    * LP-1981760: ``Element.attrib`` now registers as ``collections.abc.MutableMapping``.

    * lxml now has a static build setup for macOS on ARM64 machines (not used for building wheels).
      Patch by Quentin Leffray.
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/textproc/py-lxml'
  unixtime: '1671146524'
  user: adam