Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 271137 - sci-libs/gdal depends on <dev-libs/xerces-c-3
Summary: sci-libs/gdal depends on <dev-libs/xerces-c-3
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Steve Arnold
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 271131
  Show dependency tree
 
Reported: 2009-05-24 20:57 UTC by Mark Loeser (RETIRED)
Modified: 2009-06-17 06:20 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Mark Loeser (RETIRED) gentoo-dev 2009-05-24 20:57:47 UTC 
Ebuilds for this package have an explicit dependency on a version of xerces-c
which is less than 3.0.0.  All of these ebuilds must be fixed since earlier
versions of xerces-c have a security vulnerability, and those versions of
xerces-c need to be removed from the tree or hard-masked.

sci-libs/gdal/gdal-1.3.1.ebuild:	gml? ( <dev-libs/xerces-c-2.8.0 )
sci-libs/gdal/gdal-1.3.2.ebuild:	gml? ( <dev-libs/xerces-c-2.8.0 )
sci-libs/gdal/gdal-1.4.2.ebuild:	gml? ( <dev-libs/xerces-c-2.8.0 )
sci-libs/gdal/gdal-1.5.0-r1.ebuild:	gml? ( >=dev-libs/xerces-c-2.8.0 )
sci-libs/gdal/gdal-1.5.1.ebuild:	gml? ( >=dev-libs/xerces-c-2.8.0 )
Comment 1 Steve Arnold archtester gentoo-dev 2009-06-17 06:20:22 UTC 
Gone.