>>>>> "Steve" == Steve Kargl <[EMAIL PROTECTED]> writes:

Steve> Should we consider removing zlib and intl?

Note that zlib is built both as a host library and a target library.
So, if it is removed, cross builds of libgcj will no longer work.

Steve> In particular, zlib 1.2.3
Steve> was released on 19 Jul 05 and included 2 fixes for security issues.
Steve> GCC did not update zlib until 12 Sep 05.  Whether the security issues
Steve> in GCC's version of zlib could be exploited, I do not know.  I do know
Steve> a 2 month lag time seems inappropriate.

Yeah, that could be a problem.

Tom

Reply via email to