libxml2-2.15.2

[Bruce Dubbs]

New point version.

[Xi Ruoyao]

Security

• CVE-2026-1757 fix: Memory leak in xmllint Shell - shell.c
• CVE-2026-0990 fix: Prevent infinite recursion in xmlCatalogListXMLResolve
• CVE-2026-0992 fix: Exponential behavior when handling
• parser: Fix infinite loop in xmlCtxtParseContent
• CVE-2025-10911 libxslt related: Ignore next/prev of documents when traversing XPath
• CVE-2026-0989 fix: Add RelaxNG include limit
• xmlIO: use size_t for buffer size reallocation
• uri: fix signed integer overflow in xmlBuildRelativeURISafe
• schematron: fix memory leaks on error paths in xmlSchematronParseRule
• catalog: fix stack overflow from self-referencing SGML CATALOG entries

Improvements

• fuzz: Make fuzzy encoding match more lenient
• Fix C14N type confusion
• meson: Fix build with Meson < 1.3
• xmllint: Use zlib directly
• xmllint: New option to separate xpath results using null, --xpath0
• autotools: Make valgrind actually check for leaks
• meson: Add valgrind test setup
• Fix xmlOutputBufferGetContent output when encoder is set
• threads: don't force _WIN32_WINNT to Vista if it's set to a higher value
• dist: Add generated documentation to the dist as "dist-doc" folder to simplify downstream packaging of doc
• Fix xmlRemoveEntity removing from wrong hash table
• use duplicating variant in relaxng to mitigate UAF
• Fix memory leak in xmlTextWriterStartAttributeNS on OOM
• meson: remove hardcoded buildtype=debug default
• Fix memory leak of prefix in xmlTextWriterStartElementNS()
• writer: Add a few extra NULL checks to avoid memory leaks on corrupt writer path.

[Douglas R. Reno]

Fixed at 1bd2adaa26884b9c16fc6cad1f6bfa4cdcd5cb97

SA-13.0-005 issued.