[OWSLib-devel] [security release] OWSLib 0.28.1 released

Tom Kralidis tomkralidis at gmail.com
Fri Feb 24 08:43:54 PST 2023


The OWSLib team announces the release of OWSLib 0.28.1.


This is a security release that disables entity resolution in XML payloads.

As a result, OWSLib now requires the lxml package for XML handling.

It is strongly recommended to update to OWSLib 0.28.1.


OWSLib is a Python package for client programming with Open Geospatial

Consortium (OGC) web service (hence OWS) interface standards, and
their related content models.


Source and binary downloads
---------------------------------------

The source code is available at https://github.com/geopython/OWSLib

The package has been uploaded to https://pypi.org/project/OWSLib

0.28.1 (2023-02-24)
--------------------------

A full list of commits for 0.28.1 can be found
at: https://github.com/geopython/OWSLib/commits/0.28.1


- use only lxml for XML parsing and disable entity resolution in XML payloads


Testers and developers are always welcome.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/owslib-devel/attachments/20230224/c617646c/attachment.htm>


More information about the OWSLib-devel mailing list