Christian Fersch schrieb am 29.08.2017 um 10:46:
> the previous releases were build with 2.9.3, due to 2.9.4 having a bug
> regarding schema validation. Unfortunately, 2.9.3 has it's own bugs, too.
>
> You can see some previous discussion here:
> https://bugs.launchpad.net/lxml/+bug/1706375
>
> That discussion was then moved to this mailing list – unfortunately all of
> its web-accessible archives seem to be broken :(. If you have a newsreader,
> you can have a look at nntp://news.gmane.org/gmane.comp.python.lxml.devel.
> The thread title is "Should (Linux) binary wheels include libxml2/libxslt".
>
> If you need a quick fix, you can just compile lxml yourself with your own
> version of libxml2 – that's what we ended up doing.
>
> On 29.08.17 8:43:15, "Swarnalatha Kannan" wrote:
>> We are using lxml (lxml-3.3.4.win-amd64-py2.7) in my project which gets
>> shipped with libxml2 2.9.0. We would like to upgrade libxml2 to 2.9.4 to
>> mitigate security vulnerabilities (CVE-2016-4448
>>
>> ). For this upgrade we have to update lxml which has 2.9.4 libxml2. But
>> latest lxml for 2.7 python 64 bit windows is having 2.9.3. Let me know
>> how to solve the issue? Thanks.
>>
>> Python version used: python-2.7.12.amd64.msi

A new libxml2 release is announced within weeks, and then the release cycle
will hopefully be shorter in the future.

I'm currently waiting for the next libxml2 release, and then I'll upload
lxml 4.0 with binaries that should include it.

Stefan

_________________________________________________________________
Mailing list for the lxml Python XML toolkit - http://lxml.de/
lxml@lxml.de
https://mailman-mail5.webfaction.com/listinfo/lxml