v2.15.2: Mar 03 2026

### Security

- CVE-2026-1757 fix: Memory leak in xmllint Shell - shell.c
- CVE-2026-0990 fix: Prevent infinite recursion in
  xmlCatalogListXMLResolve
- CVE-2026-0992 fix: Exponential behavior when handling
- parser: Fix infinite loop in xmlCtxtParseContent
- CVE-2025-10911 libxslt related: Ignore next/prev of documents when
  traversing XPath
- CVE-2026-0989 fix: Add RelaxNG include limit
- xmlIO: use size_t for buffer size reallocation
- uri: fix signed integer overflow in xmlBuildRelativeURISafe
- schematron: fix memory leaks on error paths in xmlSchematronParseRule
- catalog: fix stack overflow from self-referencing SGML CATALOG entries

### Improvements

- fuzz: Make fuzzy encoding match more lenient
- Fix C14N type confusion
- meson: Fix build with Meson < 1.3
- xmllint: Use zlib directly
- xmllint: New option to separate xpath results using null, --xpath0
- autotools: Make valgrind actually check for leaks
- meson: Add valgrind test setup
- Fix xmlOutputBufferGetContent output when encoder is set
- threads: don't force _WIN32_WINNT to Vista if it's set to a higher value
- dist: Add generated documentation to the dist as "dist-doc" folder
  to simplify downstream packaging of doc
- Fix xmlRemoveEntity removing from wrong hash table
- use duplicating variant in relaxng to mitigate UAF
- Fix memory leak in xmlTextWriterStartAttributeNS on OOM
- meson: remove hardcoded buildtype=debug default
- Fix memory leak of prefix in xmlTextWriterStartElementNS()
- writer: Add a few extra NULL checks to avoid memory leaks on corrupt
  writer path.

### Thanks

Thanks to the following new contributors:

- gabriel desharnais
- Herman Semenoff
- Iván Chavero
- Jayakrishna Menon
- Michael Heilmann
- Michal Privoznik
- Nathan
- Peter Fordham
- Petr Simecek
- Sandino Araico Sanchez
- Stéphane Cerveau
- Steve Lhomme
- Trevor Gamblin
- ylwango613
- Yun

### Full list of commits and contributors on this release

15  Daniel Garcia Moreno
 5  ylwango613
 4  Peter Fordham
 4  Nick Wellnhofer
 2  Michal Privoznik
 2  Iván Chavero
 1  gabriel desharnais
 1  Yun
 1  Trevor Gamblin
 1  Stéphane Cerveau
 1  Steve Lhomme
 1  Sandino Araico Sanchez
 1  Petr Simecek
 1  Niels Dossche
 1  Nathan
 1  Mike Dalessio
 1  Michael Heilmann
 1  Jayakrishna Menon
 1  Herman Semenoff
 1  Benjamin Gilbert