Fix mXSS vulnerability due to the use of improper parser

Resolves: CVE-2020-27783

python-lxml.spec

@@ -2,13 +2,14 @@
 
 Name:           python-%{modname}
 Version:        4.5.1
-Release:        2%{?dist}
+Release:        3%{?dist}
 Summary:        XML processing library combining libxml2/libxslt with the ElementTree API
 
 License:        BSD
 URL:            https://github.com/lxml/lxml
 Source0:        https://lxml.de/files/%{modname}-%{version}.tgz
 Patch0001:      https://github.com/lxml/lxml/commit/fa1d856cad369d0ac64323ddec14b02281491706.patch#/0001-Avoid-globally-overriding-the-libxml2-external-entit.patch
+Patch0002:      0002-Fix-CVE-2020-27783-mXSS-due-to-the-use-of-improper-p.patch
 
 BuildRequires:  gcc
 BuildRequires:  libxml2-devel
@@ -58,6 +59,10 @@ env WITH_CYTHON=true %py3_build
 %{python3_sitearch}/%{modname}-*.egg-info/
 
 %changelog
+* Fri Dec 18 2020 Mikolaj Izdebski <mizdebsk@redhat.com> - 4.5.1-3
+- Fix mXSS vulnerability due to the use of improper parser
+- Resolves: CVE-2020-27783
+
 * Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 4.5.1-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild