Update to 4.9.1

Fix for CVE-2022-2309

Resolves: rhbz#2107571, rhbz#2110131

python-lxml.spec

@@ -1,6 +1,6 @@
 Name:           python-lxml
-Version:        4.7.1
-Release:        6%{?dist}
+Version:        4.9.1
+Release:        1%{?dist}
 Summary:        XML processing library combining libxml2/libxslt with the ElementTree API
 
 # The lxml project is licensed under BSD-3-Clause
@@ -11,6 +11,11 @@ License:        BSD-3-Clause AND MIT-CMU AND MIT
 URL:            https://github.com/lxml/lxml
 Source:         %{pypi_source lxml}
 
+# Work around libxml2 bug in affected versions that failed to reset the
+# namespace count in the parser context.
+# Resolved upstream: https://github.com/lxml/lxml/commit/c742576c105f40fc8b754fcae56fee4aa35840a3
+Patch:          fix-namespace-count.patch
+
 BuildRequires:  gcc
 BuildRequires:  libxml2-devel
 BuildRequires:  libxslt-devel
@@ -66,6 +71,11 @@ cp -a build/lib.%{python3_platform}-*/* src/
 %doc README.rst src/lxml/isoschematron/resources/xsl/iso-schematron-xslt1/readme.txt
 
 %changelog
+* Wed Sep 14 2022 Charalampos Stratakis <cstratak@redhat.com> - 4.9.1-1
+- Update to 4.9.1
+- Fix for CVE-2022-2309
+- Resolves: rhbz#2107571, rhbz#2110131
+
 * Wed Aug 31 2022 Miro Hrončok <mhroncok@redhat.com> - 4.7.1-6
 - Use SPDX license identifiers
 - The schematron files are not Zlib licensed, but MIT