Imported Upstream version 1.1.35upstream/1.1.35

1 files changed, 167 insertions, 4 deletions

diff --git a/NEWS b/NEWS
index 7200cd33..609e9615 100644
--- a/NEWS
+++ b/NEWS
@@ -1,13 +1,176 @@
 
         NEWS file for libxslt
 
-  Note that this is automatically generated from the news webpage at:
-       http://xmlsoft.org/XSLT/news.html
-
 See the git page at 
 https://gitlab.gnome.org/GNOME/libxslt
 
-to get a description of the recent commits.Those are the public releases made:
+to get a description of the recent commits.
+v1.1.35: Feb 16 2022:
+   - Security:
+  [CVE-2021-30560] Fix use-after-free in xsltApplyTemplates
+  Fix memory leak in xsltDocumentElem (David King)
+  Fix memory leak in xsltCompileIdKeyPattern (David King)
+  Fix double-free with stylesheets containing entity nodes
+  
+   - Fixed regressions:
+  Fix performance regression with predicates in patterns
+  Fix regression in xsltComputeSortResult
+  
+   - Bug fixes:
+  Fix conflict resolution for templates with same priority
+  Fix xsl:number generating invalid UTF-8
+  Support attribute value templates in xsl:sort lang attributes
+  Don't pass first <xsl:sort> in <xsl:apply-templates> twice
+  Fix quadratic runtime with text and <xsl:message>
+  Don't allow empty EXSLT durations
+  
+   - Improvements:
+  Add xsltproc --huge Argument via libxml XML_PARSE_HUGE (William N. Braswell, Jr.)
+  
+   - Tests, code quality, fuzzing:
+  Remove .travis.yml
+  Fix some misleading indentation (David King)
+  Use actual types for templates in struct _xsltStylesheet
+  Add CI for CMake on MSVC (Markus Rickert)
+  Check for null pointer before calling freelocale
+  Add CI test for Python 3
+  Don't set maxDepth in XPath contexts
+  Transfer XPath limits to XPtr context
+  Stop using maxParserDepth XPath limit
+  Make long-to-double cast explicit in date.c
+  Disable LeakSanitizer
+  Run clang CI tests with -Wimplicit-int-conversion
+  Fix implicit-int-conversion warning in exslt/crypto.c
+  Fix clang -Wimplicit-int-conversion warning (David Kilzer)
+  Fix clang -Wconditional-uninitialized warning in libxslt/numbers.c (David Kilzer)
+  Fix -Wshadow warnings in libexslt/dynamic.c (David Kilzer)
+  Also search parent dir for source XML when fuzzing
+  
+   - Build system, portability:
+  Add CMake build files (Markus Rickert)
+  Initial support for Python 3 (Suleyman Poyraz)
+  Call ANSI versions of WinAPI functions explicitly
+  Remove redundant flags from pkg-config files
+  Suppress automake warning in tests/XSLTMark
+  Fix linking libexslt dynamic library when using MinGW (Vadim Zeitlin)
+  Added platform specific path separators (Dmitriy Korovkin)
+  win32: allow passing *FLAGS on command line
+  Fix export of xsltExtMarker on Windows (David Kilzer)
+  Fix redundant includes already in libexslt.h (David Kilzer)
+  Minor fixes to configure.js
+  Fix variable syntax in Python configuration
+  Add new EXSLT string tests to EXTRA_DIST
+  Fix xml2-config check in configure script
+  win32: Add configuration for profiler (Chun-wei Fan)
+  Check whether 'xml2-config --dynamic' is supported
+  
+   - Documentation:
+  Add Makefile rule to regenerate xsltproc.html
+  Update links
+  Remove MAINTAINERS
+  Upload documentation to GitLab Pages
+  Add documentation in devhelp format
+  Add --enable-rebuild-docs configure option
+  Fix libexslt header summaries
+  Fix validity of tutorial XML (David King)
+  Use DocBook URL for tutorial DTD (David King)
+  Update libxslt.doap
+  Add missing options to xsltproc man page
+  
+
+
+v1.1.34: Oct 30 2019:
+   - Documentation:
+  Fix EXSLT web pages (Nick Wellnhofer),
+  Regenerate web pages (Nick Wellnhofer),
+  Fix Git link in news.html (Nick Wellnhofer),
+  Minor documentation fixes after recent changes (Nick Wellnhofer),
+  Fix typos (Jan Pokorný),
+  Regenerate symbols and API docs (Nick Wellnhofer),
+  Regenerate EXSLT website (Nick Wellnhofer)
+  
+   - Portability:
+  Remove stubs when compiling without debugger or profiler (Nick Wellnhofer),
+  configure.ac: Invoke PKG_CHECK_MODULES for building shared libraries (Hugh McMaster),
+  configure.ac: Conditionally determine whether xml2-config should pass shared libraries or static libraries (Hugh McMaster),
+  xslt-config.in: Fix broken --prefix=DIR support (Hugh McMaster),
+  libexslt.pc.in: Do not expose private library  dependencies unless invoked (Hugh McMaster),
+  libxslt.pc.in: Do not expose private library dependencies  unless invoked (Hugh McMaster),
+  Fix -Wformat-overflow warning (GCC 9) (Nick Wellnhofer),
+  Stop including ansidecl.h (Nick Wellnhofer),
+  Remove WIN32_EXTRA_* variables (Nick Wellnhofer),
+  Fix vsnprintf in Python bindings on Windows (Nick Wellnhofer),
+  Build without winsock (Nick Wellnhofer),
+  Stop redefining snprintf on MinGW (Nick Wellnhofer)
+  
+   - Bug Fixes:
+  xsl:template without name and match attributes should not be allowed (Nikolai Weibull),
+  Make sure that Python tests exit with error code (Nick Wellnhofer),
+  Improve handling of invalid UTF-8 in format-number (Nick Wellnhofer),
+  Fix dangling pointer in xsltCopyText (Nick Wellnhofer),
+  Fix memory leak in pattern compilation error path (Nick Wellnhofer),
+  Fix uninitialized read with UTF-8 grouping chars (Nick Wellnhofer),
+  Fix integer overflow in FORMAT_GYEAR (Nick Wellnhofer),
+  Fix performance regression with xsl:number (Nick Wellnhofer),
+  Backup XPath context node in xsltInitCtxtKey (Nick Wellnhofer),
+  Fix unsigned integer overflow in date.c (Nick Wellnhofer),
+  Fix insertion of xsl:fallback content (Nick Wellnhofer),
+  Avoid quadratic behavior in xsltSaveResultTo (Nick Wellnhofer),
+  Fix numbering in non-Latin scripts (Nick Wellnhofer),
+  Fix uninitialized read of xsl:number token (Nick Wellnhofer),
+  Fix integer overflow in _exsltDateDayInWeek (Nick Wellnhofer),
+  Rework xsltAttrVT allocation (Nick Wellnhofer),
+  Fix check of xsltTestCompMatch return value (Nick Wellnhofer),
+  Fix security framework bypass (Nick Wellnhofer),
+  Use xmlNewTextChild in EXSLT dyn:map (Nick Wellnhofer),
+  Fix float casts in exsltDateDuration (Nick Wellnhofer),
+  Always set context node before calling XPath iterators (Nick Wellnhofer),
+  Fix attribute precedence with xsl:use-attribute-sets (Nick Wellnhofer),
+  Backup context node in exsltFuncFunctionFunction (Nick Wellnhofer),
+  Initialize ctxt->output before evaluating global vars (Nick Wellnhofer),
+  Fix memory leak in EXSLT functions error path (Nick Wellnhofer)
+  
+   - Improvements:
+  Enable continuous integration via GitLab CI (Nick Wellnhofer),
+  Fix -Wimplicit-fallthrough warnings (Nick Wellnhofer),
+  Adjust number of API index pages (Nick Wellnhofer),
+  Make xsltCompileRelativePathPattern non-recursive (Nick Wellnhofer),
+  Check that crypto:rc4_decrypt produces valid UTF-8 (Nick Wellnhofer),
+  Avoid recursion in keys.c:skipPredicate (Nick Wellnhofer),
+  xslt-config.in: Simply handling of $all_flags (Hugh McMaster),
+  xslt-config.in: Add a --dynamic option to --libs (Hugh McMaster),
+  xslt-config.in: Simplify basic library handling (Hugh McMaster),
+  xslt-config.in: Remove unused variable (Hugh McMaster),
+  xslt-config: Simply handling of --cflags (Hugh McMaster),
+  Add Travis test with MemorySanitizer (Nick Wellnhofer),
+  Run Travis ASan tests under Xenial (Nick Wellnhofer),
+  Improve fuzzers (Nick Wellnhofer),
+  Always reuse XPath context (Nick Wellnhofer),
+  Compile with -Wextra (Nick Wellnhofer),
+  Make profiler support optional (Nick Wellnhofer),
+  Hide unused code when compiling without debugger (Nick Wellnhofer),
+  Reorganize fuzzing code (Nick Wellnhofer),
+  Simplify .gitignore (Nick Wellnhofer),
+  Optional operation limit (Nick Wellnhofer),
+  Improve seed corpus and dictionary (Nick Wellnhofer),
+  Reuse XPath context when compiling stylesheets (Nick Wellnhofer),
+  Reuse XPath context in dyn:map (Nick Wellnhofer),
+  Reuse XPath context in saxon:expression (Nick Wellnhofer),
+  Add libFuzzer targets (Nick Wellnhofer),
+  Adjust error message in expected test output (Nick Wellnhofer),
+  Change bug tracker URL (Nick Wellnhofer),
+  Change git repo URL (Nick Wellnhofer),
+  Regenerate NEWS (Nick Wellnhofer),
+  Fix misleading indentation in security.c (Nick Wellnhofer)
+  
+   - Cleanups:
+  Candidate release 1 of libxslt 1.1.34 * doc/xsltproc.xml: moved to new place for docbook stylesheet and work   around a missing / inrewrite of  docbook xsl catalog in Fedora 30 * tests/fuzz/Makefile.am: add fuzz.h to sources * python/Makefile.am: there is no more TODO * libxslt.spec.in: run make tests instead of check to avoid fuzz in that   environment, and drop python TODO (Daniel Veillard),
+  Remove empty TODO file (Nick Wellnhofer),
+  Remove generated file libxsltclass.txt from version control (Nick Wellnhofer),
+  Rebuild docs (Nick Wellnhofer)
+  
+
+
 v1.1.33: Jan 03 2019:
    - Portability:
   Variables need 'extern' in static lib on Cygwin (Nick Wellnhofer),