[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#32957: Python uses a bundled expat
|
From: |
Leo Famulari |
|
Subject: |
bug#32957: Python uses a bundled expat |
|
Date: |
Wed, 10 Oct 2018 15:27:14 -0400 |
|
User-agent: |
Mutt/1.10.1 (2018-07-13) |
On Sat, Oct 06, 2018 at 04:58:13PM +0200, Marius Bakke wrote:
> Python 2 and 3 are using a bundled Expat (residing under Modules/).
>
> This has been the cause of security vulnerabilities in the past and
> should be changed to use Expat from Guix.
Looks like Debian uses an external Expat to fill the dependency, so it
should be possible:
https://packages.debian.org/stretch/python3.5-minimal
We should look into the difference between the bundled Expat and
upstream Expat.
signature.asc
Description: PGP signature