* [gentoo-dev] Needs ideas: Upcoming circular dependency: expat <> CMake
[not found] <1a722f8f-36b5-c313-b6e1-eac75e0839c5@gentoo.org>
@ 2019-12-18 21:02 99% ` Sebastian Pipping
0 siblings, 0 replies; 1+ results
From: Sebastian Pipping @ 2019-12-18 21:02 UTC (permalink / raw
To: gentoo-dev
Hi all,
I noticed that dev-util/cmake depends on dev-libs/expat and that
libexpat upstream (where I'm involved) is in the process of
dropping GNU Autotools altogether in favor of CMake in the near future,
potentially the next release (without any known target release date).
CMake bundles a (previously outdated and vulnerable) copy of expat so
I'm not sure if re-activating that bundle — say with a new use flag
"system-expat" — would be a good thing to resort to for breaking the
cycle, with regard to security in particular.
Do you have any ideas how to avoid a bad circular dependency issue for
our users in the future? Are you aware of similar problems and
solutions from the past?
Thanks and best
Sebastian
^ permalink raw reply [relevance 99%]
Results 1-1 of 1 | reverse | options above
-- pct% links below jump to the message on this page, permalinks otherwise --
[not found] <1a722f8f-36b5-c313-b6e1-eac75e0839c5@gentoo.org>
2019-12-18 21:02 99% ` [gentoo-dev] Needs ideas: Upcoming circular dependency: expat <> CMake Sebastian Pipping
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox