Re: libxml, libxml2; Debian Security Advisory DSA 455-1

2004-03-05 Thread s. keeling
Incoming from Martin Schulze:
 s. keeling wrote:
  Incoming from Martin Schulze:
   Debian Security Advisory DSA 455-1 [EMAIL PROTECTED]
   
   Package: libxml, libxml2
   
   libxml2 is a library for manipulating XML files.
   [snip]
   For the stable distribution (woody) this problem has been fixed in
   version 1.8.17-2woody1 of libxml and version 2.4.19-4woody1 of libxml2.
  .
  
  (0) root /root_ apt-get install libxml libxml2
  Reading Package Lists... Done
  Building Dependency Tree... Done
  E: Couldn't find package libxml
  (100) root /root_ dpkg -l | grep libxml
  [snip]
  ii  libxml11.8.17-2   GNOME XML library
  ii  libxml22.5.7-1woody1  GNOME XML library
  
  So, is that libxml above a typo?  Should I instead have done
  apt-get install libxml1 libxml2?  Suggestions?  I'm using:
  
  deb ftp://ftp.rfc822.org/debian-security/ stable/updates main contrib non-free
 
 Please see the output of apt-cache show {libxml,libxml1,libxml2}.

That says libxml doesn't exist (W: Unable to locate package libxml),
so am I to take that as a hint that I only need update libxml2, since
the advisory doesn't mention libxml1?


[Sorry for the mis-post to debian-security-private.  Think, then post.]


-- 
Any technology distinguishable from magic is insufficiently advanced.
(*)   http://www.spots.ab.ca/~keeling 
- -


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: libxml, libxml2; Debian Security Advisory DSA 455-1

2004-03-05 Thread Daniel Kobras
On Fri, Mar 05, 2004 at 11:20:09AM -0700, s. keeling wrote:
 Incoming from Martin Schulze:
  s. keeling wrote:
   Incoming from Martin Schulze:
Debian Security Advisory DSA 455-1 [EMAIL PROTECTED]

Package: libxml, libxml2

libxml2 is a library for manipulating XML files.
[snip]
For the stable distribution (woody) this problem has been fixed in
version 1.8.17-2woody1 of libxml and version 2.4.19-4woody1 of libxml2.
   .
   
   (0) root /root_ apt-get install libxml libxml2
   Reading Package Lists... Done
   Building Dependency Tree... Done
   E: Couldn't find package libxml
   (100) root /root_ dpkg -l | grep libxml
   [snip]
   ii  libxml11.8.17-2   GNOME XML library
   ii  libxml22.5.7-1woody1  GNOME XML library
   
   So, is that libxml above a typo?  Should I instead have done
   apt-get install libxml1 libxml2?  Suggestions?  I'm using:
   
   deb ftp://ftp.rfc822.org/debian-security/ stable/updates main contrib non-free
  
  Please see the output of apt-cache show {libxml,libxml1,libxml2}.
 
 That says libxml doesn't exist (W: Unable to locate package libxml),
 so am I to take that as a hint that I only need update libxml2, since
 the advisory doesn't mention libxml1?

libxml is the name of the source package that builds the binary package
libxml1 (among others). The names of all affected binary packages are
mentioned in the URLs at the end of the advisory. So the libxml1 package
on your system ought to be updated as well. Simply running apt-get
upgrade will likely do the right thing for you, by the way.

Regards,

Daniel.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: libxml, libxml2; Debian Security Advisory DSA 455-1

2004-03-05 Thread s. keeling
Incoming from Martin Schulze:
 s. keeling wrote:
  Incoming from Martin Schulze:
   Debian Security Advisory DSA 455-1 [EMAIL PROTECTED]
   
   Package: libxml, libxml2
   
   libxml2 is a library for manipulating XML files.
   [snip]
   For the stable distribution (woody) this problem has been fixed in
   version 1.8.17-2woody1 of libxml and version 2.4.19-4woody1 of libxml2.
  .
  
  (0) root /root_ apt-get install libxml libxml2
  Reading Package Lists... Done
  Building Dependency Tree... Done
  E: Couldn't find package libxml
  (100) root /root_ dpkg -l | grep libxml
  [snip]
  ii  libxml11.8.17-2   GNOME XML library
  ii  libxml22.5.7-1woody1  GNOME XML library
  
  So, is that libxml above a typo?  Should I instead have done
  apt-get install libxml1 libxml2?  Suggestions?  I'm using:
  
  deb ftp://ftp.rfc822.org/debian-security/ stable/updates main contrib 
  non-free
 
 Please see the output of apt-cache show {libxml,libxml1,libxml2}.

That says libxml doesn't exist (W: Unable to locate package libxml),
so am I to take that as a hint that I only need update libxml2, since
the advisory doesn't mention libxml1?


[Sorry for the mis-post to debian-security-private.  Think, then post.]


-- 
Any technology distinguishable from magic is insufficiently advanced.
(*)   http://www.spots.ab.ca/~keeling 
- -



Re: libxml, libxml2; Debian Security Advisory DSA 455-1

2004-03-05 Thread Daniel Kobras
On Fri, Mar 05, 2004 at 11:20:09AM -0700, s. keeling wrote:
 Incoming from Martin Schulze:
  s. keeling wrote:
   Incoming from Martin Schulze:
Debian Security Advisory DSA 455-1 [EMAIL PROTECTED]

Package: libxml, libxml2

libxml2 is a library for manipulating XML files.
[snip]
For the stable distribution (woody) this problem has been fixed in
version 1.8.17-2woody1 of libxml and version 2.4.19-4woody1 of libxml2.
   .
   
   (0) root /root_ apt-get install libxml libxml2
   Reading Package Lists... Done
   Building Dependency Tree... Done
   E: Couldn't find package libxml
   (100) root /root_ dpkg -l | grep libxml
   [snip]
   ii  libxml11.8.17-2   GNOME XML library
   ii  libxml22.5.7-1woody1  GNOME XML library
   
   So, is that libxml above a typo?  Should I instead have done
   apt-get install libxml1 libxml2?  Suggestions?  I'm using:
   
   deb ftp://ftp.rfc822.org/debian-security/ stable/updates main contrib 
   non-free
  
  Please see the output of apt-cache show {libxml,libxml1,libxml2}.
 
 That says libxml doesn't exist (W: Unable to locate package libxml),
 so am I to take that as a hint that I only need update libxml2, since
 the advisory doesn't mention libxml1?

libxml is the name of the source package that builds the binary package
libxml1 (among others). The names of all affected binary packages are
mentioned in the URLs at the end of the advisory. So the libxml1 package
on your system ought to be updated as well. Simply running apt-get
upgrade will likely do the right thing for you, by the way.

Regards,

Daniel.