NEWS

NEWS file for libxslt

v1.1.37: Aug 29 2022

### Improvements

- Don't use deprecated libxml2 macros
- Don't mess with xmlDefaultSAXHandler

### Build system

- Require automake-1.16.3 or later
- Remove generated files from distribution
- Add missing compile definition for static builds to Autotools (Mike Dalessio)


v1.1.36: Aug 17 2022

### Removals and deprecations

- Remove SVN keyword anchors
- Remove CVS and SVN-related code
- Remove README.cvs-commits
- Remove ChangeLog
- Remove xsltwin32config.h

### Improvements

- Simplify xsltexports.h and exsltexports.h
- Don't overlink executables with gcrypt
- Fix quadratic behavior with variables and parameters
- Remove case labels with XPointer location types
- Add configure~ to .gitignore
- Stop calling deprecated libxml2 functions

### Portability

- Use portable python shebangs (David Seifert)
- Remove useless __CYGWIN__ checks
- Remove cruft from win32config.h
- crypto.c: Silence a compiler warning on Windows (Chun-wei Fan)

### Build system

- Add missing compile definition for static builds to CMake
- Avoid obsolescent `test -a` constructs (David Seifert)
- Only link libxml2 statically in purely static build
- Set AC_CONFIG_MACRO_DIR
- Allow AM_MAINTAINER_MODE to be disabled
- Streamline and fix documentation installation
- Don't try to recreate COPYING symlink
- Remove special configuration for certain maintainers
- configure.ac: produce tar.xz only (GNOME policy) (David Seifert)
- Detect libm using libtool's macros (David Seifert)
- configure.ac: disable static libraries by default (David Seifert)
- python/Makefile.am: nest python docs in $(docdir) (David Seifert)
- python/Makefile.am: rely on global AM_INIT_AUTOMAKE (David Seifert)
- configure.ac: remove useless AC_SUBST (David Seifert)
- Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings (David Seifert)
- Change libxml2 Python config
- Don't check for standard C89 library functions
- Don't check for standard C89 headers
- Remove --with-html-dir option
- Also check for glibtoolize in autogen.sh
- Rework documentation build system
- Remove old website
- CMake: Relax check for enabling crypto support on Windows (Chun-wei Fan)
- Remove obsolete AC_HEADER_STDC autoconf macro (Vadim Zeitlin)
- Remove special configuration for old maintainers

### Test suite, CI

- Remove test involving XPointer range-to function
- Test recursion in EXSLT dynamic functions
- Add CI job for static build

### Documentation

- Move tutorial images


v1.1.35: Feb 16 2022:
   - Security:
  [CVE-2021-30560] Fix use-after-free in xsltApplyTemplates
  Fix memory leak in xsltDocumentElem (David King)
  Fix memory leak in xsltCompileIdKeyPattern (David King)
  Fix double-free with stylesheets containing entity nodes
  
   - Fixed regressions:
  Fix performance regression with predicates in patterns
  Fix regression in xsltComputeSortResult
  
   - Bug fixes:
  Fix conflict resolution for templates with same priority
  Fix xsl:number generating invalid UTF-8
  Support attribute value templates in xsl:sort lang attributes
  Don't pass first <xsl:sort> in <xsl:apply-templates> twice
  Fix quadratic runtime with text and <xsl:message>
  Don't allow empty EXSLT durations
  
   - Improvements:
  Add xsltproc --huge Argument via libxml XML_PARSE_HUGE (William N. Braswell, Jr.)
  
   - Tests, code quality, fuzzing:
  Remove .travis.yml
  Fix some misleading indentation (David King)
  Use actual types for templates in struct _xsltStylesheet
  Add CI for CMake on MSVC (Markus Rickert)
  Check for null pointer before calling freelocale
  Add CI test for Python 3
  Don't set maxDepth in XPath contexts
  Transfer XPath limits to XPtr context
  Stop using maxParserDepth XPath limit
  Make long-to-double cast explicit in date.c
  Disable LeakSanitizer
  Run clang CI tests with -Wimplicit-int-conversion
  Fix implicit-int-conversion warning in exslt/crypto.c
  Fix clang -Wimplicit-int-conversion warning (David Kilzer)
  Fix clang -Wconditional-uninitialized warning in libxslt/numbers.c (David Kilzer)
  Fix -Wshadow warnings in libexslt/dynamic.c (David Kilzer)
  Also search parent dir for source XML when fuzzing
  
   - Build system, portability:
  Add CMake build files (Markus Rickert)
  Initial support for Python 3 (Suleyman Poyraz)
  Call ANSI versions of WinAPI functions explicitly
  Remove redundant flags from pkg-config files
  Suppress automake warning in tests/XSLTMark
  Fix linking libexslt dynamic library when using MinGW (Vadim Zeitlin)
  Added platform specific path separators (Dmitriy Korovkin)
  win32: allow passing *FLAGS on command line
  Fix export of xsltExtMarker on Windows (David Kilzer)
  Fix redundant includes already in libexslt.h (David Kilzer)
  Minor fixes to configure.js
  Fix variable syntax in Python configuration
  Add new EXSLT string tests to EXTRA_DIST
  Fix xml2-config check in configure script
  win32: Add configuration for profiler (Chun-wei Fan)
  Check whether 'xml2-config --dynamic' is supported
  
   - Documentation:
  Add Makefile rule to regenerate xsltproc.html
  Update links
  Remove MAINTAINERS
  Upload documentation to GitLab Pages
  Add documentation in devhelp format
  Add --enable-rebuild-docs configure option
  Fix libexslt header summaries
  Fix validity of tutorial XML (David King)
  Use DocBook URL for tutorial DTD (David King)
  Update libxslt.doap
  Add missing options to xsltproc man page
  


v1.1.34: Oct 30 2019:
   - Documentation:
  Fix EXSLT web pages (Nick Wellnhofer),
  Regenerate web pages (Nick Wellnhofer),
  Fix Git link in news.html (Nick Wellnhofer),
  Minor documentation fixes after recent changes (Nick Wellnhofer),
  Fix typos (Jan Pokorn),
  Regenerate symbols and API docs (Nick Wellnhofer),
  Regenerate EXSLT website (Nick Wellnhofer)
  
   - Portability:
  Remove stubs when compiling without debugger or profiler (Nick Wellnhofer),
  configure.ac: Invoke PKG_CHECK_MODULES for building shared libraries (Hugh McMaster),
  configure.ac: Conditionally determine whether xml2-config should pass shared libraries or static libraries (Hugh McMaster),
  xslt-config.in: Fix broken --prefix=DIR support (Hugh McMaster),
  libexslt.pc.in: Do not expose private library  dependencies unless invoked (Hugh McMaster),
  libxslt.pc.in: Do not expose private library dependencies  unless invoked (Hugh McMaster),
  Fix -Wformat-overflow warning (GCC 9) (Nick Wellnhofer),
  Stop including ansidecl.h (Nick Wellnhofer),
  Remove WIN32_EXTRA_* variables (Nick Wellnhofer),
  Fix vsnprintf in Python bindings on Windows (Nick Wellnhofer),
  Build without winsock (Nick Wellnhofer),
  Stop redefining snprintf on MinGW (Nick Wellnhofer)
  
   - Bug Fixes:
  xsl:template without name and match attributes should not be allowed (Nikolai Weibull),
  Make sure that Python tests exit with error code (Nick Wellnhofer),
  Improve handling of invalid UTF-8 in format-number (Nick Wellnhofer),
  Fix dangling pointer in xsltCopyText (Nick Wellnhofer),
  Fix memory leak in pattern compilation error path (Nick Wellnhofer),
  Fix uninitialized read with UTF-8 grouping chars (Nick Wellnhofer),
  Fix integer overflow in FORMAT_GYEAR (Nick Wellnhofer),
  Fix performance regression with xsl:number (Nick Wellnhofer),
  Backup XPath context node in xsltInitCtxtKey (Nick Wellnhofer),
  Fix unsigned integer overflow in date.c (Nick Wellnhofer),
  Fix insertion of xsl:fallback content (Nick Wellnhofer),
  Avoid quadratic behavior in xsltSaveResultTo (Nick Wellnhofer),
  Fix numbering in non-Latin scripts (Nick Wellnhofer),
  Fix uninitialized read of xsl:number token (Nick Wellnhofer),
  Fix integer overflow in _exsltDateDayInWeek (Nick Wellnhofer),
  Rework xsltAttrVT allocation (Nick Wellnhofer),
  Fix check of xsltTestCompMatch return value (Nick Wellnhofer),
  Fix security framework bypass (Nick Wellnhofer),
  Use xmlNewTextChild in EXSLT dyn:map (Nick Wellnhofer),
  Fix float casts in exsltDateDuration (Nick Wellnhofer),