[pkg-fgfs-crew] Bug#560937: Bug#560937: Bug#560932: Bug#560912: Expat issues update

Michael Gilbert michael.s.gilbert at gmail.com
Mon Dec 14 16:24:04 UTC 2009


On Mon, 14 Dec 2009 12:17:17 +0100, Ove Kaaven wrote:
> Mike Hommey skrev:
> > On Sun, Dec 13, 2009 at 05:21:26PM +0100, Matthias Klose wrote:
> >> On 13.12.2009 16:29, Michael Gilbert wrote:
> >>> Hi all,
> >>>
> >>> In order to guarantee that the system expat is used, the
> >>> '--with-expat=sys' configure argument must be used.  If you think
> >>> your package is already using the system expat, or if you are updating
> >>> your package to use the system expat, please check to make sure that
> >>> this option is being used. Thanks.
> >> there's no such option for python, which uses a modified copy of expat.
> > 
> > Likewise with mozilla, which uses a heavily modified copy of expat.
> 
> And I think the xml parser in simgear was ripped from some version of
> mozilla. (Of course, I wouldn't consider a security flaw in a flight
> simulator library as critical as one in an actual web browser or
> anything, so I'm not sure how much I need to worry...)

that may be true, but even so it should be fixed before squeeze is
released, which is why this is being tracked as rc.

mike





More information about the pkg-fgfs-crew mailing list