On Tue, Oct 10, 2006 at 08:51:55AM -0400, David Edelsohn wrote: > >>>>> Steve Kargl writes: > > Steve> Should we consider removing zlib and intl? In particular, zlib 1.2.3 > Steve> was released on 19 Jul 05 and included 2 fixes for security issues. > Steve> GCC did not update zlib until 12 Sep 05. Whether the security issues > Steve> in GCC's version of zlib could be exploited, I do not know. I do know > Steve> a 2 month lag time seems inappropriate. > > Inappropriate? I don't know. Obviously updating it sooner would > be better. If you are volunteering to perform the merge work, great.
No. I am not volunteering to maintain zlib. If you reread the first 7 words, you'll note that I'm suggesting that zlib and intl should be removed. Why shouldn't these libraries be treated the same as gmp and mpfr? -- Steve
