[Zope-Coders] zlib

[Shane Hathaway]

Tim Peters wrote:
> [Jeremy Hylton]
> 
>>...
>>Before I revert the checkins and tweak the Zope3 links appropriately,
>>I thought I'd ask if there is any need to distribute zlib with Zope.
>>Is there?
> 
> 
> Just noting that a security hole was discovered in zlib 1.1.3 not too long
> ago, and we (PythonLabs) almost instantly cut new versions of the Python
> Windows installers to include the fixed zlib 1.1.4.  The moral is that if
> nobody actively keeps on eye on 3rd-party packages, shipping them with your
> own product can transform from "convenience feature" to "disaster" in an
> eyeblink.

We updated Zope's zlib about as quickly. :-)

AFAIK the only third party packages included with Zope 2 are zlib, 
(py)Expat, and Medusa.  I think we're removing all of these in Zope 3.

Shane