Browse code
Added python-xml to requires of python-defusedxml. Added python3-xml to requires of python3-defusedxml.
Change-Id: I5421d014ba84368cb09852f0e2ad3ed2817b1c25
Reviewed-on: http://photon-jenkins.eng.vmware.com:8082/3379
Tested-by: gerrit-photon <photon-checkins@vmware.com>
Reviewed-by: Rongrong Qiu <rqiu@vmware.com>
xiaolin-vmware authored on 2017/08/02 04:12:53Showing 1 changed files
| ... | ... |
@@ -4,7 +4,7 @@ |
| 4 | 4 |
Summary: XML bomb protection for Python stdlib modules |
| 5 | 5 |
Name: python-defusedxml |
| 6 | 6 |
Version: 0.5.0 |
| 7 |
-Release: 2%{?dist}
|
|
| 7 |
+Release: 3%{?dist}
|
|
| 8 | 8 |
Url: https://pypi.python.org/pypi/defusedxml |
| 9 | 9 |
License: PSFL |
| 10 | 10 |
Group: Development/Languages/Python |
| ... | ... |
@@ -22,6 +22,7 @@ BuildRequires: python-setuptools |
| 22 | 22 |
|
| 23 | 23 |
Requires: python2 |
| 24 | 24 |
Requires: python2-libs |
| 25 |
+Requires: python-xml |
|
| 25 | 26 |
|
| 26 | 27 |
%description |
| 27 | 28 |
The results of an attack on a vulnerable XML library can be fairly dramatic. With just a few hundred Bytes of XML data an attacker can occupy several Gigabytes of memory within seconds. An attacker can also keep CPUs busy for a long time with a small to medium size request. Under some circumstances it is even possible to access local files on your server, to circumvent a firewall, or to abuse services to rebound attacks to third parties. |
| ... | ... |
@@ -40,6 +41,7 @@ BuildRequires: python3-xml |
| 40 | 40 |
|
| 41 | 41 |
Requires: python3 |
| 42 | 42 |
Requires: python3-libs |
| 43 |
+Requires: python3-xml |
|
| 43 | 44 |
|
| 44 | 45 |
%description -n python3-defusedxml |
| 45 | 46 |
|
| ... | ... |
@@ -77,6 +79,9 @@ popd |
| 77 | 77 |
%{python3_sitelib}/*
|
| 78 | 78 |
|
| 79 | 79 |
%changelog |
| 80 |
+* Tue Aug 01 2017 Xiaolin Li <xiaolinl@vmware.com> 0.5.0-3 |
|
| 81 |
+- Added python-xml to requires of python-defusedxml. |
|
| 82 |
+- Added python3-xml to requires of python3-defusedxml. |
|
| 80 | 83 |
* Wed Jun 07 2017 Xiaolin Li <xiaolinl@vmware.com> 0.5.0-2 |
| 81 | 84 |
- Add python3-setuptools and python3-xml to python3 sub package Buildrequires. |
| 82 | 85 |
* Thu Mar 09 2017 Xiaolin Li <xiaolinl@vmware.com> 0.5.0-1 |