httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "William A. Rowe Jr." <>
Subject Re: Prior to apr 2.0 / httpd 2.4...
Date Mon, 21 Mar 2011 01:13:51 GMT
On 3/20/2011 7:43 PM, Dan Poirier wrote:
> On Sun. 2011-03-20 at 07:47 PM EDT, "William A. Rowe Jr." <>
>> [1] Note particularly that expat appears to be abandoned, no releases
>> in almost 4 yrs, with a significant security issue hanging over it we
>> patched in apr.  No effort appears to be expended in providing any
>> alternate non-expat apr_xml interfaces.
> For APR to continue bundling expat seems easiest, in the absence of
> anyone motivated to do something more.

I wish we had a better understanding of where expat is headed, or if it
is truly abandoned.  It seems strange to rely on an orphaned dependency.

Anyone have any inside knowledge or informed opinion?

View raw message