Sourced from lxml's releases.
lxml-5.4.0
5.4.0 (2025-04-22)
Bugs fixed
- LP#2107279: Binary wheels use libxml2 2.13.8 and libxslt 1.1.43 to resolve several CVEs. (Binary wheels for Windows continue to use a patched libxml2 2.11.9 and libxslt 1.1.39.) Issue found by Anatoly Katyushin, see https://bugs.launchpad.net/lxml/+bug/2107279
lxml-5.3.2
No release notes provided.
lxml-5.3.1
No release notes provided.
Sourced from lxml's changelog.
5.4.0 (2025-04-22)
Bugs fixed
- LP#2107279: Binary wheels use libxml2 2.13.8 and libxslt 1.1.43 to resolve several CVEs. (Binary wheels for Windows continue to use a patched libxml2 2.11.9 and libxslt 1.1.39.) Issue found by Anatoly Katyushin.
5.3.2 (2025-04-05)
This release resolves CVE-2025-24928 as described in https://gitlab.gnome.org/GNOME/libxml2/-/issues/847
Bugs fixed
Binary wheels use libxml2 2.12.10 and libxslt 1.1.42.
Binary wheels for Windows use a patched libxml2 2.11.9 and libxslt 1.1.39.
5.3.1 (2025-02-09)
Bugs fixed
GH#440: Some tests were adapted for libxml2 2.14.0. Patch by Nick Wellnhofer.
LP#2097175:
DTD(external_id="…")
erroneously required a byte string as ID value.GH#450:
iterparse()
internally triggered the `DeprecationWarning`` added in lxml 5.3.0 when parsing HTML.Other changes
- GH#442: Binary wheels for macOS no longer use the linker flag
-flat_namespace
.
6e76d57
Build: Exclude slow Py3.9 wheel builds for s390/ppc and Py3.7 for
ARM64.ee10c02
Prepare release of lxml 5.4.0.0e4f3c3
Prepare release of lxml 5.3.3.b4703fc
Update changelog.db723bb
Build: Use libxslt 1.1.43 instead of 1.1.42 to resolve some CVEs.a664877
Build: Use libxml2 2.13.8 instead of 2.12.x to resolve some CVEs.df4633e
Remove appveyor usage.820db89
CI: Allow Py3.14 jobs to fail.93ad02a
docs: Add a note about C compiler installation to error message (GH-454)16878da
Add some hints to the documentation on how to build lxml (GH-453)