Nick Wellnhofer has announced the release of Libxml2 2.10.4.
Libxml2 2.10.4 released
Version 2.10.4 of libxml2 is available at https://download.gnome.org/sources/libxml2/2.10/
Security
- [CVE-2023-29469] Hashing of empty dict strings isn’t deterministic
- [CVE-2023-28484] Fix null deref in xmlSchemaFixupComplexType
- schemas: Fix null-pointer-deref in xmlSchemaCheckCOSSTDerivedOK
Regressions
Libxml2 2.10.4 released
- SAX2: Ignore namespaces in HTML documents
- io: Fix “buffer full” error with certain buffer sizes