Thursday 13th March 2025
Local Packages
Updated curl (8.13.0-rc1) to fix --cert parameter (Bug #2351531)
Updated libxslt to 1.1.43 and build with --with-plugins:
- Major changes:
The non-standard EXSLT crypto extensions and support for dynamically loaded plugins are now disabled by default, but can be enabled by passing --with-crypto or --with-plugins to configure; in a future release, these features will be removed
Debug output and the debugger are disabled by default and can be enabled by passing --with-debug or --with-debugger
- Security:
Fix use-after-free of XPath context node (CVE-2025-24855)
Fix use-after-free related to excluded namespaces (CVE-2024-55549)
- Bug fixes:
- variables: Fix non-deterministic generated IDs
libxml2 related clean-up:
python: Don't use removed libxml2 macro
tests: Skip test_bad.xsl with libxml2 before 2.13
python: Don't include nanoftp.h and nanohttp.h
- tests: Avoid namespace warning on Windows
numbers: Stop using libxml2 XPath axis API
numbers: Use private copy of xmlCopyCharMultiByte
documents: Use xmlCtxtParseDocument if available
tests: Make runtest compile with older libxml2 versions
utils: Account for libxml2 change
tests: Make bug-219.xsl compatible with older libxml2
extensions: Always include stdlib.h
extensions: Don't use libxml2's "modules" feature
- Code clean-up:
numbers: Make static variables const
- variables: Remove debug code
- Portability:
python: Declare init func with PyMODINIT_FUNC
exslt: Use C99 NAN macro
- Build:
- cmake: Always build Python module as shared library
- cmake: Fix compatibility in package version file
configure.ac: Find libgcrypt via pkg-config