[mapguide-internals] MapGuide Open Source 2.1

Tom Fukushima tom.fukushima at autodesk.com
Thu Oct 16 14:53:31 EDT 2008

This has been bothering me a bit as well.

Can someone explain why we have taken the approach we did and what the plans are for OEM going forward? I don't know the history of this.  Bruce and Trevor?

SQLite is used for the web tier unit tests.


-----Original Message-----
From: mapguide-internals-bounces at lists.osgeo.org [mailto:mapguide-internals-bounces at lists.osgeo.org] On Behalf Of Jason Birch
Sent: Thursday, October 16, 2008 12:49 PM
To: MapGuide Internals Mail List
Subject: RE: [mapguide-internals] MapGuide Open Source 2.1


there are a considerable number of external libraries that are out of

- GEOS 3.0 and 3.0.1 have been released (not sure on officiality of

- PHP 5.2.6 has been released and includes one nasty security fix and a
bunch of bug fixes

- Apache 2.2.10 has been released with many, many fixes (our distributed
version is 2.2.4)

- All of the libraries under GD are at least three years old, and
several have had serious security issues resolved in this timeframe.

- Others?

I understand that it's unlikely that we'll be able to address these for
2.1 given the timeframe, but I'm worried that
storing the OEM components in our repository is institutionalizing these
versions in our project.  This causes several problems:
  - users (especially Linux users) that have more modern versions
installed on their systems run into problems
  - it becomes harder and harder for us to contribute fixes upstream and
take advantage of upstream fixes in return
  - our users become more and more vulnerable to security issues in the
components that we are not keeping up with

I'm not sure what the solution is, but this is a considerable pain

As an aside, I just noticed that SQLite is included in MapGuide.  Out of
curiosity, what uses this?


-----Original Message-----
From: Tom Fukushima
Subject: [mapguide-internals] MapGuide Open Source 2.1

I would like to post a MGOS 2.1 beta the week of Oct 20th.  This is of
course contingent on me getting resources from our Autodesk internal
build team (they are very overloaded right now) to get some builds
mapguide-internals mailing list
mapguide-internals at lists.osgeo.org

More information about the mapguide-internals mailing list