From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marius Bakke Subject: bug#32957: Python uses a bundled expat Date: Sat, 06 Oct 2018 16:58:13 +0200 Message-ID: <87o9c7i0l6.fsf@fastmail.com> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:49912) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1g8o2w-0008Q2-Re for bug-guix@gnu.org; Sat, 06 Oct 2018 10:59:11 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1g8o2q-0002f5-Dy for bug-guix@gnu.org; Sat, 06 Oct 2018 10:59:09 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:34497) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1g8o2o-0002ct-8m for bug-guix@gnu.org; Sat, 06 Oct 2018 10:59:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1g8o2o-0005KV-41 for bug-guix@gnu.org; Sat, 06 Oct 2018 10:59:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: Received: from eggs.gnu.org ([2001:4830:134:3::10]:49510) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1g8o2B-0007uJ-Fv for bug-guix@gnu.org; Sat, 06 Oct 2018 10:58:24 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1g8o27-00026X-4s for bug-guix@gnu.org; Sat, 06 Oct 2018 10:58:22 -0400 Received: from out3-smtp.messagingengine.com ([66.111.4.27]:56795) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1g8o26-00024z-0J for bug-guix@gnu.org; Sat, 06 Oct 2018 10:58:18 -0400 Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailout.nyi.internal (Postfix) with ESMTP id E01D821175 for ; Sat, 6 Oct 2018 10:58:15 -0400 (EDT) Received: from localhost (140.226.16.62.customer.cdi.no [62.16.226.140]) by mail.messagingengine.com (Postfix) with ESMTPA id 449AA102E8 for ; Sat, 6 Oct 2018 10:58:15 -0400 (EDT) List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: 32957@debbugs.gnu.org --=-=-= Content-Type: text/plain Python 2 and 3 are using a bundled Expat (residing under Modules/). This has been the cause of security vulnerabilities in the past and should be changed to use Expat from Guix. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAlu4zYUACgkQoqBt8qM6 VPo2UAgAzKQ8+SbMxzNFx4YEEOM/Mm0XKo+20DMBZHlqI+Gg0Q+9VVCNfwttbAzw zdEYr5Zw5FEWIe30/97Dw0BdmaK+17rREcSrc6b4UZESgIPF9R1NHzcxwZWjRWj7 PuOI6pHdADHzraMN1afgyGg2jVVc8zPmLCimNcHUpJIvJH+kFVPauEetl/ONcC7G mOtNL1d3pHmpSAgCEHQ+iC7KoPJDDJBM0aKLtDNTYK69VaOY8L3K2b/5DgHW+jCE RcA6tlE37Cjen+L64fPmvlMqPSD5GT5nAwn5/PwPaXWJG6FaVW5FVo6OGdn/EKI7 5kHqiuLZm2yr/fBY7xWlOhqPajHEyg== =dmT8 -----END PGP SIGNATURE----- --=-=-=--