libxslt (1.1.34-4ubuntu0.22.04.5) jammy-security; urgency=medium

  * SECURITY UPDATE: Denial of service in psvi memory field.
    - debian/patches/CVE-2025-7424-*.patch: Change logic of tctxt->style->doc
      in libxslt/functions.c, add libxslt/transformInternals.h, add new build
      section to include file in libxslt/Makefile.am.
    - CVE-2025-7424

 -- Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com>  Tue, 06 Jan 2026 13:03:17 -0330

libxslt (1.1.34-4ubuntu0.22.04.4) jammy-security; urgency=medium

  * SECURITY UPDATE: ASLR bypass due to exposure of sensitive information
    - debian/patches/0002-Make-generate-id-deterministic.patch: removed, as
    this was an old and incomplete implementation of the fix.
    - debian/patches/CVE-2023-40403-1.patch: implement infrastructure to 
    store extra data in source nodes.
    - debian/patches/CVE-2023-40403-2.patch: store key status of source
    nodes as bit flag.
    - debian/patches/CVE-2023-40403-3.patch: store RVT ownership in
    'compression' member.
    - debian/patches/CVE-2023-40403-4.patch: remove the use of 
    &base_address when generating ids in libxslt/functions.c.
    - debian/patches/CVE-2023-40403-5.patch: clean up attributes in
    source doc.
    - CVE-2023-40403

 -- Edwin Jiang <edwin.jiang@canonical.com>  Fri, 20 Jun 2025 09:52:36 -0400

libxslt (1.1.34-4ubuntu0.22.04.3) jammy-security; urgency=medium

  * SECURITY UPDATE: use-after-free via nested XPath evaluations
    - debian/patches/CVE-2025-24855.patch: properly handle XPath context
      nodes and transformation context nodes in libxslt/numbers.c,
      libxslt/templates.c, libxslt/xsltutils.c.
    - CVE-2025-24855

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 19 Mar 2025 12:54:45 -0400

libxslt (1.1.34-4ubuntu0.22.04.2) jammy-security; urgency=medium

  * SECURITY UPDATE: use-after-free via exclusion of result prefixes
    - debian/patches/CVE-2024-55549.patch: store string in stylesheet's
      dict to avoid use after free in libxslt/xslt.c.
    - CVE-2024-55549

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 18 Mar 2025 10:41:52 -0400

libxslt (1.1.34-4ubuntu0.22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Use after free
    - debian/patches/CVE-2021-30560.patch: fix use after free
      in xsltApplyTemplates in libxslt/transform.c.
    - CVE-2021-30560

 -- Leonidas Da Silva Barbosa <leo.barbosa@canonical.com>  Thu, 18 Aug 2022 08:44:36 -0300

libxslt (1.1.34-4build2) jammy; urgency=high

  * No change rebuild for ppc64el baseline bump.

 -- Julian Andres Klode <juliank@ubuntu.com>  Thu, 24 Mar 2022 17:15:44 +0100

libxslt (1.1.34-4build1) impish; urgency=medium

  * No-change rebuild to build packages with zstd compression.

 -- Matthias Klose <doko@ubuntu.com>  Thu, 07 Oct 2021 12:19:57 +0200

libxslt (1.1.34-4) unstable; urgency=medium

  * Team upload.
  * Add patch to make the xslt-config script compatible with multi-arch.
    Closes: #952768

 -- Mattia Rizzolo <mattia@debian.org>  Wed, 04 Mar 2020 14:02:32 +0100

libxslt (1.1.34-3) unstable; urgency=medium

  * Team upload.
  * Add a patch to fix FTBFS when built twice in a row.  Closes: #947914
    (Add build-dependency on docbook-xsl for this.)

 -- Mattia Rizzolo <mattia@debian.org>  Sat, 22 Feb 2020 15:28:46 +0100

libxslt (1.1.34-2) unstable; urgency=medium

  * Team upload.
  * Re-add the xslt-config script for now.
  * d/control: Bump Standards-Version to 4.5.0, no changes needed.
  * Upload to unstable.

 -- Mattia Rizzolo <mattia@debian.org>  Fri, 21 Feb 2020 14:24:17 +0100

# For older changelog entries, run 'apt-get changelog libxslt1.1'
