11NEWS file for libxslt
22
3- v1.1.43: not yet released
3+ v1.1.43: Mar 12 2025
44
55### Major changes
66
@@ -12,6 +12,46 @@ In a future release, these features will be removed.
1212Debug output and the debugger are disabled by default and can be
1313enabled by passing --with-debug or --with-debugger.
1414
15+ ### Security
16+
17+ - [CVE-2025-24855] Fix use-after-free of XPath context node
18+ - [CVE-2024-55549] Fix UAF related to excluded namespaces
19+
20+ ### Bug fixes
21+
22+ - variables: Fix non-deterministic generated IDs
23+
24+ ### libxml2 related cleanup
25+
26+ - python: Don't use removed libxml2 macro
27+ - tests: Skip test_bad.xsl with libxml2 before 2.13
28+ - python: Don't include nanoftp.h and nanohttp.h
29+ - tests: Avoid namespace warning on Windows
30+ - numbers: Stop using libxml2 XPath axis API
31+ - numbers: Use private copy of xmlCopyCharMultiByte
32+ - documents: Use xmlCtxtParseDocument if available
33+ - tests: Make runtest compile with older libxml2 versions
34+ - utils: Account for libxml2 change
35+ - tests: Make bug-219.xsl compatible with older libxml2
36+ - extensions: always include stdlib.h (Hugo Beauzée-Luyssen)
37+ - extensions: Don't use libxml2's "modules" feature
38+
39+ ### Code cleanup
40+
41+ - numbers: Make static variables const
42+ - variables: Remove debug code
43+
44+ ### Portability
45+
46+ - python: Declare init func with PyMODINIT_FUNC
47+ - exslt: Use C99 NAN macro
48+
49+ ### Build
50+
51+ - cmake: Always build Python module as shared library
52+ - cmake: Fix compatibility in package version file
53+ - configure.ac: Find libgcrypt via pkg-config (Alessandro Astone)
54+
1555
1656v1.1.42: Jul 4 2024
1757
0 commit comments