From: Alexander H. <ale...@gm...> - 2016-06-22 16:00:09
|
> On Jun 22, 2016, at 08:45, Sebastian Pipping <seb...@pi...> wrote: > > Hi there! > > > Just a quick heads up that Expat 2.2.0 has been released and > your distro could be among the very first to ship it > > According to [1], the Fink project is missing out on Expat 2.1.1 and > several important security fixes already, 5 vulnerabilities with CVEs as > it seems. > > If there is need for patching anything new downstream, I would love > teaming up with you integrating changes upstream so you can resolve the > patch downstream with the next release. > > Best > > > > Sebastian > > > PS: Please let me know who to contact on Expat in the future for > (a) regular updates and (b) security issues. > > > [1] http://pdb.finkproject.org/pdb/package.php/expat1 <http://pdb.finkproject.org/pdb/package.php/expat1> The fink-core list is fine for both regular updates and security issues. I’ve put packaging up at https://sourceforge.net/p/fink/package-submissions/4702/ <https://sourceforge.net/p/fink/package-submissions/4702/> for evaluation. -- Alexander Hansen, Ph.D. Fink User Liaison |