On Mon, 14 Dec 2009 12:17:17 +0100, Ove Kaaven wrote: > Mike Hommey skrev: > > On Sun, Dec 13, 2009 at 05:21:26PM +0100, Matthias Klose wrote: > >> On 13.12.2009 16:29, Michael Gilbert wrote: > >>> Hi all, > >>> > >>> In order to guarantee that the system expat is used, the > >>> '--with-expat=sys' configure argument must be used. If you think > >>> your package is already using the system expat, or if you are updating > >>> your package to use the system expat, please check to make sure that > >>> this option is being used. Thanks. > >> there's no such option for python, which uses a modified copy of expat. > > > > Likewise with mozilla, which uses a heavily modified copy of expat. > > And I think the xml parser in simgear was ripped from some version of > mozilla. (Of course, I wouldn't consider a security flaw in a flight > simulator library as critical as one in an actual web browser or > anything, so I'm not sure how much I need to worry...)
that may be true, but even so it should be fixed before squeeze is released, which is why this is being tracked as rc. mike -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
