Bug 271137

Summary:	sci-libs/gdal depends on <dev-libs/xerces-c-3
Product:	Gentoo Linux	Reporter:	Mark Loeser (RETIRED) <halcy0n>
Component:	New packages	Assignee:	Steve Arnold <nerdboy>
Status:	RESOLVED FIXED
Severity:	normal	CC:	sci-geosciences
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	271131

Description Mark Loeser (RETIRED) gentoo-dev

2009-05-24 20:57:47 UTC

Ebuilds for this package have an explicit dependency on a version of xerces-c
which is less than 3.0.0.  All of these ebuilds must be fixed since earlier
versions of xerces-c have a security vulnerability, and those versions of
xerces-c need to be removed from the tree or hard-masked.

sci-libs/gdal/gdal-1.3.1.ebuild:	gml? ( <dev-libs/xerces-c-2.8.0 )
sci-libs/gdal/gdal-1.3.2.ebuild:	gml? ( <dev-libs/xerces-c-2.8.0 )
sci-libs/gdal/gdal-1.4.2.ebuild:	gml? ( <dev-libs/xerces-c-2.8.0 )
sci-libs/gdal/gdal-1.5.0-r1.ebuild:	gml? ( >=dev-libs/xerces-c-2.8.0 )
sci-libs/gdal/gdal-1.5.1.ebuild:	gml? ( >=dev-libs/xerces-c-2.8.0 )

Comment 1 Steve Arnold archtester

2009-06-17 06:20:22 UTC

Gone.