Releases: lxml/lxml
Releases Β· lxml/lxml
lxml-5.4.0
5.4.0 (2025-04-22)
Bugs fixed
- LP#2107279: Binary wheels use libxml2 2.13.8 and libxslt 1.1.43 to resolve several CVEs.
(Binary wheels for Windows continue to use a patched libxml2 2.11.9 and libxslt 1.1.39.)
Issue found by Anatoly Katyushin, see https://bugs.launchpad.net/lxml/+bug/2107279
lxml-5.3.2
5.3.2 (2025-04-05) ================== This release resolves CVE-2025-24928 as described in https://gitlab.gnome.org/GNOME/libxml2/-/issues/847 Bugs fixed ---------- * Binary wheels use libxml2 2.12.10 and libxslt 1.1.42. * Binary wheels for Windows use a patched libxml2 2.11.9 and libxslt 1.1.39.
lxml-5.3.1
5.3.1 (2025-02-09) ================== Bugs fixed ---------- * GH#440: Some tests were adapted for libxml2 2.14.0. Patch by Nick Wellnhofer. * LP#2097175: ``DTD(external_id="β¦")`` erroneously required a byte string as ID value. * GH#450: ``iterparse()`` internally triggered the `DeprecationWarning`` added in lxml 5.3.0 when parsing HTML. Other changes ------------- * GH#442: Binary wheels for macOS no longer use the linker flag ``-flat_namespace``.
lxml-5.3.0
5.3.0 (2024-08-10) ================== Features added -------------- * GH#421: Nested ``CDATA`` sections are no longer rejected but split on output to represent ``]]>`` correctly. Patch by Gertjan Klein. Bugs fixed ---------- * LP#2060160: Attribute values serialised differently in ``xmlfile.element()`` and ``xmlfile.write()``. * LP#2058177: The ISO-Schematron implementation could fail on unknown prefixes. Patch by David Lakin. Other changes ------------- * LP#2067707: The ``strip_cdata`` option in ``HTMLParser()`` turned out to be useless and is now deprecated. * Binary wheels use the library versions libxml2 2.12.9 and libxslt 1.1.42. * Windows binary wheels use the library versions libxml2 2.11.8 and libxslt 1.1.39. * Built with Cython 3.0.11.
lxml-5.2.2
5.2.2 (2024-05-12)
Bugs fixed
-
GH#417: The
test_feed_parsertest could fail iflxml_html_cleanwas not installed.
It is now skipped in that case. -
LP#2059910: The minimum CPU architecture for the Linux x86 binary wheels was set back to
"core2", without SSE 4.2. -
If libxml2 uses iconv, the compile time version is available as
etree.ICONV_COMPILED_VERSION.
lxml-5.2.1
5.2.1 (2024-04-02)
==================
Bugs fixed
----------
* LP#2059910: The minimum CPU architecture for the Linux x86 binary wheels was set back to
"core2", but with SSE 4.2 enabled.
* LP#2059977: ``Element.iterfind("//absolute_path")`` failed with a ``SyntaxError``
where it should have issued a warning.
* GH#416: The documentation build was using the non-standard ``which`` command.
Patch by MichaΕ GΓ³rny.
lxml-5.2.0
5.2.0 (2024-03-30) ================== Other changes ------------- * LP#1958539: The ``lxml.html.clean`` implementation suffered from several (only if used) security issues in the past and was now extracted into a separate library: https://github.com/fedora-python/lxml_html_clean Projects that use lxml without "lxml.html.clean" will not notice any difference, except that they won't have potentially vulnerable code installed. The module is available as an "extra" setuptools dependency "lxml[html_clean]", so that Projects that need "lxml.html.clean" will need to switch their requirements from "lxml" to "lxml[html_clean]", or install the new library themselves. * The minimum CPU architecture for the Linux x86 binary wheels was upgraded to "sandybridge" (launched 2011), and glibc 2.28 / gcc 12 (manylinux_2_28) wheels were added. * Built with Cython 3.0.10.
lxml-5.1.1
5.1.1
lxml-5.0.2
5.0.2
lxml-5.1.0-2
lxml-5.1.0-2