Hey,

>  > Yes, it's a little insane alright. I think we should be safe and sane
>  > with libpng, libjpeg, libz as they are relatively slow moving and their
>  > interfaces are pretty stable [although currently marked as 'External'
>  > in /usr/sfw].
> 
>  speaking of libpng, i built 1.2.8 because of their ominous sounding
> security advisory, which covers versions prior to 1.2.8:
> 
>  http://www.libpng.org/pub/png/libpng.html

Will investigate this - looks like we're currently building 1.2.5 with a
bunch of security patches on top of that. Probably makes sense to move
to 1.2.8 if we can.

>  > libxml2 and libxslt might be a little bit more problematic though. I
>  > know as a JDS team we're pretty much over the barrel with whatever
>  > version of the libraries that GNOME requires - and while Daniel Veillard
>  > tries to stand by the ABI and API compatibility, we often require a
>  > newer version than the one that's currently shipped with Solaris and
>  > often don't have time to request an upgrade. We've had to package our
>  > own private copies of libxml2 and libxslt in the past. While libxml2 is
>  > marked as 'Standard', libxslt is marked as 'Evolving' so we probably
>  > have slightly more leeway with that.
> 
>  i have built libxml2-2.6.19 and libxslt-1.1.14. this has more to do
> with KDE4 planning to move to DBUS, which requires a libxml2 above
> 2.6.

Yep, those are the ones we're currently building for GNOME 2.10, since
we also have requirements from DBUS, and some documentation build tools.
Will let you know how possible it is to update the libraries that are
already shipped with Solaris.


Glynn

_______________________________________________
opensolaris-discuss mailing list
[email protected]

Reply via email to