Re: zlib security flaw?

Branko Čibej <brane@xbc.nu> writes:
> Yes, I found that patch after I posted the above, but the problem is
> that I don't understand it -- in other words, I've no ides if it's
> correct.
>
> So, do I trust the FreeBSD people, or do I wait? Suggestions, please.

Can you understand it enough to know that it doesn't *introduce* any
security risks? In that case, I'd say trust the FreeBSD people and
use it.

(Sure, it would be nice to understand intimately every line of code we
depend on, but in practice that doesn't scale.)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Sat Jul 9 22:10:22 2005