622350 – dev-haskell/hexpat uses bundled dev-libs/expat

Bug 622350 - dev-haskell/hexpat uses bundled dev-libs/expat

Summary: dev-haskell/hexpat uses bundled dev-libs/expat

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Gentoo's Haskell Language team

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2017-06-20 20:19 UTC by Sergei Trofimovich (RETIRED)
Modified:	2017-08-20 11:41 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Sergei Trofimovich (RETIRED) gentoo-dev

2017-06-20 20:19:58 UTC

Expat gets it's fixes time to time and bundled libraries lack behind
accumulating security bugs and similar things. More words: https://wiki.gentoo.org/wiki/Why_not_bundle_dependencies

We should:
- figure out how old expat version is bundled
- what are default #defines are used to check feasibility of using gentoo's library variant
- ask/add support for using installed version upstream.

Should be a matter of a few lines in .cabal file.

Comment 1 Sebastian Pipping gentoo-dev

2017-06-20 20:54:51 UTC

Upstream bug opened at https://github.com/the-real-blackh/hexpat/issues/8 now.

Comment 2 Sergei Trofimovich (RETIRED) gentoo-dev

2017-08-20 11:41:18 UTC

hexpat-0.20.13 (unbundled hexpat upstream) added as : https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f49b572487044b635dadd0db10851963ab42ffda

Thank you!