Bug#888547: CVE-2017-1000190

[Ivo De Decker]

Hi,

On Sun, Apr 14, 2019 at 11:57:26PM +0200, Emmanuel Bourg wrote:
> Le 14/04/2019 à 23:27, Markus Koschany a écrit :
> 
> > Simple-xml is only required to build carrotsearch-randomizedtesting. It
> > is not a test-dependency though.
> 
> > Apparently the removal makes no difference for lucene4.10.
> 
> Indeed, because carrotsearch-randomizedtesting is just a test dependency
> of lucene4.10.

Thanks for the changes allowing simple-xml to be removed. I added a removal
hint so simple-xml should be out of testing soon.

Ivo