Has lots of embedded copies in src/3rdparty, but the build doesn't show
them as being build. It is a little scary though cause there is all
kinds of sensitive stuff like webkit, freetype, libjpeg, libpng, etc.
There is also a lot of code that isn't compiled in src/*. I didn't try,
but it really only seems like only src/xmlpatterns is compiled. In light
of that, xmlpatterns is actually already supported via qt4-x11. This is
just a version bump so it doesn't need a full security audit.

That said, conditional ACK provided we try to clean up the source
tarball to remove all that extra stuff so we don't accidentally end up
with an embedded copy copied that gets compiled which later could have a
security vulnerability.


** Changed in: qtxmlpatterns-opensource-src (Ubuntu)
       Status: Incomplete => In Progress

** Changed in: qtxmlpatterns-opensource-src (Ubuntu)
     Assignee: Jamie Strandboge (jdstrand) => Ken VanDine (ken-vandine)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1157732

Title:
  [MIR] circle of friends

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/accounts-qml-module/+bug/1157732/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to