[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: libxml, libxml2; Debian Security Advisory DSA 455-1



On Fri, Mar 05, 2004 at 11:20:09AM -0700, s. keeling wrote:
> Incoming from Martin Schulze:
> > s. keeling wrote:
> > > Incoming from Martin Schulze:
> > > > Debian Security Advisory DSA 455-1                     security@debian.org
> > > > 
> > > > Package        : libxml, libxml2
> > > > 
> > > > libxml2 is a library for manipulating XML files.
> > > > [snip]
> > > > For the stable distribution (woody) this problem has been fixed in
> > > > version 1.8.17-2woody1 of libxml and version 2.4.19-4woody1 of libxml2.
> > > .............................^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> > > 
> > > (0) root /root_ apt-get install libxml libxml2
> > > Reading Package Lists... Done
> > > Building Dependency Tree... Done
> > > E: Couldn't find package libxml
> > > (100) root /root_ dpkg -l | grep libxml
> > > [snip]
> > > ii  libxml1        1.8.17-2       GNOME XML library
> > > ii  libxml2        2.5.7-1woody1  GNOME XML library
> > > 
> > > So, is that "libxml" above a typo?  Should I instead have done
> > > "apt-get install libxml1 libxml2"?  Suggestions?  I'm using:
> > > 
> > > deb ftp://ftp.rfc822.org/debian-security/ stable/updates main contrib non-free
> > 
> > Please see the output of apt-cache show {libxml,libxml1,libxml2}.
> 
> That says libxml doesn't exist (W: Unable to locate package libxml),
> so am I to take that as a hint that I only need update libxml2, since
> the advisory doesn't mention "libxml1"?

libxml is the name of the source package that builds the binary package
libxml1 (among others). The names of all affected binary packages are
mentioned in the URLs at the end of the advisory. So the libxml1 package
on your system ought to be updated as well. Simply running "apt-get
upgrade" will likely do the right thing for you, by the way.

Regards,

Daniel.



Reply to: