Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #1241922
| From | Alexandre Detiste <alexandre.detiste@gmail.com> |
|---|---|
| Newsgroups | linux.debian.bugs.dist |
| Subject | Bug#1102554: xmlrpc-c: bundles a (very old and) vulnerable copy of libexpat |
| Date | 2025-04-14 08:40 +0200 |
| Message-ID | <KBlE5-doQp-5@gated-at.bofh.it> (permalink) |
| References | <KzXXc-cv49-7@gated-at.bofh.it> <KAFvb-cXcM-17@gated-at.bofh.it> <KB4ad-ddoO-9@gated-at.bofh.it> <KzXXc-cv49-7@gated-at.bofh.it> <KB4ad-ddoO-9@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
PS: I reopened the old php bug.
The same old patch still apply => remove 1 line from debian/control{.in}
$ bts tag 691755 -wontfix
$ bts unarchive 871826
$ bts reassign 871826 src:php8.4
$ bts retitle 871826 php8.4: Please remove unused libxmltok1-dev from
Build-Depends
$ bts reopen 871826
$ bts severity 871826 important
> > src:libxmltok is expat1 with a different name.
> > CVE-2021-46143 was fixed in trixie, other expat CVEs need triaging.
> > php8.4 has a (stale?) build dependency on libxmltok1-dev.
> >
> > > Regards,
> > > Salvatore
> >
> > cu
> > Adrian
Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Bug#1102554: xmlrpc-c: bundles a (very old and) vulnerable copy of libexpat Salvatore Bonaccorso <carnil@debian.org> - 2025-04-10 13:10 +0200
Bug#1102554: xmlrpc-c: bundles a (very old and) vulnerable copy of libexpat Adrian Bunk <bunk@debian.org> - 2025-04-12 11:40 +0200
Bug#1102554: xmlrpc-c: bundles a (very old and) vulnerable copy of libexpat Alexandre Detiste <alexandre.detiste@gmail.com> - 2025-04-13 14:00 +0200
Bug#1102554: xmlrpc-c: bundles a (very old and) vulnerable copy of libexpat Alexandre Detiste <alexandre.detiste@gmail.com> - 2025-04-14 08:40 +0200
Bug#1102554: Outdated pkgconfig/xmlrpc.pc Richard Fuchs <dfx@dfx.at> - 2025-04-23 18:30 +0200
Bug#1102554: Outdated pkgconfig/xmlrpc.pc Florian Ernst <florian@debian.org> - 2025-05-02 16:30 +0200
Bug#1102554: Outdated pkgconfig/xmlrpc.pc Alexandre Detiste <alexandre.detiste@gmail.com> - 2025-05-02 17:10 +0200
csiph-web