Comment # 1 on bug 1046197 from
That is not so brilliant idea. We have old zlib there atm 1.2.8 which contains
known CVEs and we have confirmed we forget to update this bundled one every
time it gets out of sync.

>From what I can see it is used in a couple of places when using the system
version and thus token.c needs to be tweaked.

options.c
1869:#ifdef EXTERNAL_ZLIB

configure.ac
813:    AC_DEFINE(EXTERNAL_ZLIB, 1, [Define to 1 if using external zlib])

token.c
408:#ifndef EXTERNAL_ZLIB
582:#ifndef EXTERNAL_ZLIB

I will check out how much work would be to build the "bundled code" together
with the external one for time being...


You are receiving this mail because: