From philip at pixologic.com Fri Mar 15 17:33:50 2013 From: philip at pixologic.com (Philip Schneider) Date: Fri, 15 Mar 2013 09:33:50 -0700 Subject: [Expat-bugs] Build errors Message-ID: <145FC046-DD62-49DE-9081-CAD1B68002C5@pixologic.com> Greetings - My apologies if this has already been covered, but I'm not quite sure if/how I can "grep" the archives to see if it has been? Just downloaded the expat.tar.gz (onto Mac), and tried to start a build. From the results, it seems that the "./configure" scheme is a bit out of date? Here's what happens (the ">" signifies my bash prompt, the other text is the output to the shell)... > ./buildconf.sh Creating configure ... autoreconf: Entering directory `.' autoreconf: configure.in: not using Gettext autoreconf: running: aclocal --force aclocal: warning: autoconf input should be named 'configure.ac', not 'configure.in' aclocal: error: couldn't open directory 'm4': No such file or directory autoreconf: aclocal failed with exit status: 1 Now, in the MANIFEST file, I see that there should be an m4 directory, with these contents: m4/libtool.m4 m4/ltversion.m4 m4/ltoptions.m4 m4/ltsugar.m4 m4/lt~obsolete.m4 However, these files are not part of the download, nor can I find them on the expat source server (perhaps I just missed them?) I can try to get around this by editing configure.in, and commenting out this line: AC_CONFIG_MACRO_DIR([m4]) I then re-run: > ./buildconf.sh This succeeds, or at least there are no errors. So then I try the next step: < ./configure configure: error: cannot find install-sh, install.sh, or shtool in conftools "."/conftools I see that the conftools directory indeed has none of these. Again, they are listed in the MANIFEST, but are not part of the download, nor can I find them on the server: conftools/PrintPath conftools/ac_c_bigendian_cross.m4 conftools/expat.m4 conftools/get-version.sh conftools/mkinstalldirs conftools/config.guess conftools/config.sub conftools/install-sh conftools/ltmain.sh It does seem that the cmake build scheme works, so I can probably go with that. But, I'd prefer the "./configure" approach, as it's more consistent with the many other packages I use. I'm guessing these missing files once were part of the system. Any chance this can get resurrected? Thanks.. -- Philip -------------- next part -------------- An HTML attachment was scrubbed... URL: From jamie at canonical.com Thu Mar 21 14:01:52 2013 From: jamie at canonical.com (Jamie Strandboge) Date: Thu, 21 Mar 2013 13:01:52 -0000 Subject: [Expat-bugs] CVE-2013-0340 and CVE-2013-0341 Message-ID: <514B04B5.8090804@canonical.com> Hi, Recently two CVEs were assigned for expat[1]. I looked in the CVS repository but couldn't find any commits for 2013. What is the status of these CVEs? (I tried to file a bug by clicking on 'Bug reports' on the home page[2], but sourceforge just gave an error, so I am attempting to send a report here. Please CC me on any replies as I am not subscribed to the list.) Thanks! [1]http://www.openwall.com/lists/oss-security/2013/02/22/3 [2]http://www.libexpat.org/ -- Jamie Strandboge http://www.ubuntu.com/ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 899 bytes Desc: OpenPGP digital signature URL: