Package: libxmlrpc-core-c3-dev Version: 1.59.03-9 Severity: serious Hi!
The fix for the expat issues does not look right. It adds a strict pkg-config dependency on expat, but this is an implementation detail, which does not seem to be exposed to the direct users of xmlrpc. Packages build depending on libxmlrpc-core-c3-dev, then fail to build due to the missing libexpat1-dev dependency. The fix should be changed to move expat in the xmlrpc.pc file from Requires to Requires.private (for static linking), and then the libxmlrpc-core-c3-dev package should grow a dependency on libexpat1-dev The libexpat1-dev dependency cannot be avoided as long as the change involves using Requires.private, if you'd rather not need to add such dependency and do not care about static linking (which I think would also be a regression), then you would need to use Libs.private instead with -lexpat, and add -DXML_STATIC to Cflags.private, both from expat.pc). Given that the current version in testing is rather broken, a fix for this should be uploaded rather quickly, or it might not have time to migrate. :) Thanks, Guillem
