Fix mXSS vulnerability due to the use of improper parser

Resolves: CVE-2020-27783

python-lxml.spec

@@ -2,12 +2,13 @@
 
 Name:           python-%{modname}
 Version:        4.4.1
-Release:        4%{?dist}
+Release:        5%{?dist}
 Summary:        XML processing library combining libxml2/libxslt with the ElementTree API
 
 License:        BSD
 URL:            https://github.com/lxml/lxml
 Source0:        https://lxml.de/files/%{modname}-%{version}.tgz
+Patch0001:      0001-Fix-CVE-2020-27783-mXSS-due-to-the-use-of-improper-p.patch
 
 BuildRequires:  gcc
 BuildRequires:  libxml2-devel
@@ -37,7 +38,7 @@ Suggests:       python%{python3_version}dist(beautifulsoup4)
 Python 3 version.
 
 %prep
-%autosetup -n %{modname}-%{version}
+%autosetup -n %{modname}-%{version} -p1
 # Remove pregenerated Cython C sources
 find -type f -name '*.c' -print -delete
 
@@ -57,6 +58,10 @@ env WITH_CYTHON=true %py3_build
 %{python3_sitearch}/%{modname}-*.egg-info/
 
 %changelog
+* Fri Dec 18 2020 Mikolaj Izdebski <mizdebsk@redhat.com> - 4.4.1-5
+- Fix mXSS vulnerability due to the use of improper parser
+- Resolves: CVE-2020-27783
+
 * Thu Jan 30 2020 Fedora Release Engineering <releng@fedoraproject.org> - 4.4.1-4
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild