[Zope-Coders] zlib
Tim Peters
tim@zope.com
Wed, 17 Jul 2002 14:10:24 -0400
[Jeremy Hylton]
> ...
> Before I revert the checkins and tweak the Zope3 links appropriately,
> I thought I'd ask if there is any need to distribute zlib with Zope.
> Is there?
Just noting that a security hole was discovered in zlib 1.1.3 not too long
ago, and we (PythonLabs) almost instantly cut new versions of the Python
Windows installers to include the fixed zlib 1.1.4. The moral is that if
nobody actively keeps on eye on 3rd-party packages, shipping them with your
own product can transform from "convenience feature" to "disaster" in an
eyeblink.