[Pidgin] #15285: libxml2 library out of date

[Pidgin]

#15285: libxml2 library out of date
----------------------+------------------------------
 Reporter:  ioerror   |       Owner:  datallah
     Type:  defect    |      Status:  closed
Milestone:  2.10.7    |   Component:  winpidgin (gtk)
  Version:  2.10.6    |  Resolution:  fixed
 Keywords:  security  |
----------------------+------------------------------

Comment (by ioerror):

 Replying to [comment:3 datallah]:
 > Replying to [comment:2 ioerror]:
 > > If a vulnerability was found tomorrow in any or all of those libraries
 - how would these get updated?
 >
 > I worked with Dieter to figure out how this stuff is built, and I was
 able to build these myself (I did end up using Dieter's binaries though).
 >

 Wouldn't it be best if Pidgin offered them from the source forge mirror
 directly?

 It would be pretty great if building pidgin for any platform was a single
 checkout, a single tar.gz or some hybrid of source/binary components only
 from the pidgin team.

 > The build process is documented at
 https://github.com/dieterv/legacynativebuilds/ (it does require jumping
 through some hoops to get the initial setup).

 Heh. I'm not sure that I'd call that documented but I appreciate that it
 seems to be collected in one place. Looking at that git repo, I have no
 idea where to start - a README would probably be orienting. :)

 It would be interesting if dieterv hosted the built files on gnome.org, so
 we'd know the genesis of the hashes in pidgin.

-- 
Ticket URL: <https://developer.pidgin.im/ticket/15285#comment:4>
Pidgin <http://pidgin.im>
Pidgin