History Of Code Changes In Super Stable Series 1.64

This page lists all significant changes to the code, by release, for the current Xmlrpc-c Super Stable release series, which is the 1.60.nn series. For changes before 1.64.00, see the main change history.

In the Subversion source code repository, the current Super Stable release is always in directory super_stable. Individual releases within the series are not named in Subversion, but you can find them by date.

Release 1.64.04

Not yet released

• >Fix bug in Abyss: puts user-generated characters in HTML documents the server generates for error responses and directory listings. One application of this is the 404 resonse from an XML-RPC server, which contains the not-found URI, which might contain HTML tags.

  CVE-2026-15928

  Introduced in Xmlrpc-c 1.07 (December 2006).

Release 1.64.03

Released 25.08.01

• Build: fix finding of Libxml2 (erroneously used xml2-config instead of pkg-config for some things). Introduced in Xmlrpc-c 1.60 (September 2022).

Release 1.64.02

Released 25.03.28

• Fix crash when memory allocation fails in XML parsing, when built to use libxml2 XML parser. Broken in Xmlrpc-c 1.57 (December 2019).

Release 1.64.01

Released 25.03.03

• Build: fix failure to install interface header files when using separate build directory.