Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 271131 - [TRACKER] <dev-libs/xerces-c-3 removal
Summary: [TRACKER] <dev-libs/xerces-c-3 removal
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: C++ Team [disbanded]
URL:
Whiteboard:
Keywords: Tracker
Depends on: 263217 271133 271134 271137
Blocks:
  Show dependency tree
 
Reported: 2009-05-24 20:51 UTC by Mark Loeser (RETIRED)
Modified: 2017-01-19 18:47 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Mark Loeser (RETIRED) gentoo-dev 2009-05-24 20:51:29 UTC
Bugs blocking this tracker have an explicit dependency on a version of xerces-c which is less than 3.0.0.  All of these ebuilds must be fixed since earlier versions of xerces-c have a security vulnerability, and those versions of xerces-c need to be removed from the tree or hard-masked.
Comment 1 Tiziano Müller (RETIRED) gentoo-dev 2010-01-19 09:44:38 UTC
Just put dbxml-2.5.16 in the tree which finally works with xerces-c-3*.
p.masked deprecated versions of dbxml, xqilla and xerces-c to give people time to upgrade their databases.
Comment 2 Mark Loeser (RETIRED) gentoo-dev 2010-02-26 05:48:55 UTC
All blockers have been resolved and vulnerable versions removed.