Linux workstation

openSUSE Leap 16.0 native package

python313-defusedxml

XML bomb protection for Python stdlib modules

Packages / openSUSE Leap 16.0 / Development/Languages/Python / python313-defusedxml

[Source: python-defusedxml]

Package: python313-defusedxml (0.7.1-160000.2.2)

External Resources:

Homepage: [pypi.python.org]

XML bomb protection for Python stdlib modules

The results of an attack on a vulnerable XML library can be fairly dramatic. With just a few hundred bytes of XML data an attacker can occupy several gigabytes of memory within seconds. An attacker can also keep CPUs busy for a long time with a small to medium size request. This library allows for XML to be parsed in a manner that avoids these pitfalls.

Other Packages Related to python313-defusedxml:

  • dep: python(abi) (= 3.13)

    Package not available

  • dep: python313-xml

    Package not available

Download python313-defusedxml

ArchitecturePackage SizeInstalled SizeFiles
noarch46 KiB143 KiB[list of files]

Package file paths (45)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/lib/python3.13/site-packages/defusedxml
  • /usr/lib/python3.13/site-packages/defusedxml-0.7.1-py3.13.egg-info
  • /usr/lib/python3.13/site-packages/defusedxml-0.7.1-py3.13.egg-info/dependency_links.txt
  • /usr/lib/python3.13/site-packages/defusedxml-0.7.1-py3.13.egg-info/PKG-INFO
  • /usr/lib/python3.13/site-packages/defusedxml-0.7.1-py3.13.egg-info/SOURCES.txt
  • /usr/lib/python3.13/site-packages/defusedxml-0.7.1-py3.13.egg-info/top_level.txt
  • /usr/lib/python3.13/site-packages/defusedxml/cElementTree.py
  • /usr/lib/python3.13/site-packages/defusedxml/common.py
  • /usr/lib/python3.13/site-packages/defusedxml/ElementTree.py
  • /usr/lib/python3.13/site-packages/defusedxml/expatbuilder.py
  • /usr/lib/python3.13/site-packages/defusedxml/expatreader.py
  • /usr/lib/python3.13/site-packages/defusedxml/__init__.py
  • /usr/lib/python3.13/site-packages/defusedxml/lxml.py
  • /usr/lib/python3.13/site-packages/defusedxml/minidom.py
  • /usr/lib/python3.13/site-packages/defusedxml/pulldom.py
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/cElementTree.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/cElementTree.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/common.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/common.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/ElementTree.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/ElementTree.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/expatbuilder.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/expatbuilder.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/expatreader.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/expatreader.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/__init__.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/__init__.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/lxml.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/lxml.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/minidom.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/minidom.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/pulldom.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/pulldom.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/sax.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/sax.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/xmlrpc.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/__pycache__/xmlrpc.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/defusedxml/sax.py
  • /usr/lib/python3.13/site-packages/defusedxml/xmlrpc.py
  • /usr/share/doc/packages/python313-defusedxml
  • /usr/share/doc/packages/python313-defusedxml/CHANGES.txt
  • /usr/share/doc/packages/python313-defusedxml/README.txt
  • /usr/share/licenses/python313-defusedxml
  • /usr/share/licenses/python313-defusedxml/LICENSE

Field source: openSUSE Leap 16.0 OSS revision leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
0.7.1-160000.2.2leap-16.0 / ossnoarchopenSUSE Leap 16.0 · OSS · multi-architecture46 KiB143 KiBnoarch/python313-defusedxml-0.7.1-160000.2.2.noarch.rpm

Field source: openSUSE Leap 16.0 OSS revision leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

0.7.1-160000.2.2 / noarchObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha512: ba370a94d41af5aed349b21b766a84099d9c0283bf1d7794ebe2fb76bef0854fdd4c275592e081b01fababf7129055fa3301771c5aee9f14b89bf8b33b8dcba1

Field source: openSUSE Leap 16.0 OSS revision leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c

Catalog record completeness

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description
25/25
Artifact path and source digest
25/25
Dependency metadata
15/15
Package-file index
15/15
Homepage
5/5
License text
5/5
Source package or maintainer
10/10

Recorded total: 100/100

Field source: openSUSE Leap 16.0 OSS revision leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

  • Authoritative source; repository metadata signature verified, revision leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c
    Signer fingerprint
    AD485664E901B867051AB15F35A2F86E29B700A4
    Keyring revision
    opensuse-project-signing-key.asc
    SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified