1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
|
Source: defusedxml
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Uploaders: Luke Faraone <lfaraone@debian.org>, Jelmer Vernooij <jelmer@debian.org>
Section: python
Priority: optional
Build-Depends: dh-python,
python3-all,
debhelper-compat (= 13),
python3-setuptools
Standards-Version: 4.6.1
Homepage: https://github.com/tiran/defusedxml
Testsuite: autopkgtest-pkg-python
Vcs-Git: https://salsa.debian.org/python-team/packages/defusedxml.git
Vcs-Browser: https://salsa.debian.org/python-team/packages/defusedxml
Rules-Requires-Root: no
Package: python3-defusedxml
Architecture: all
Depends: ${misc:Depends}, ${python3:Depends}
Description: XML bomb protection for Python stdlib modules (for Python 3)
The results of an attack on a vulnerable XML library can be fairly dramatic.
With just a few hundred bytes of XML data an attacker can occupy several
gigabytes of memory within seconds. An attacker can also keep
CPUs busy for a long time with a small to medium size request.
.
This library allows for XML to be parsed in a manner that avoids these
pitfalls.
.
This package contains the module for the Python 3 interpreter.
|
