Bruce Momjian <br...@momjian.us> writes: > Where do we think our use of libxml2 is heading? Do you suspect > security scanners will start negative reporting the use of libxml2?
There's at least one distro that's already stopped building with --with-libxml out of security concerns. (I forget who exactly, but it's been mentioned on the PG lists.) regards, tom lane