[Zlib-devel] zlib testing for release this week

Florian Weimer fw at deneb.enyo.de
Thu Jul 14 03:03:50 EDT 2005


* Mark Adler:

> If you have a chance, please test the zlib 1.2.2.4 distribution in the 
> next day or two.  I'd like to get the zlib 1.2.3 release out on Friday, 
> since I leave for Japan on Saturday.  Thank you all for your support.

Builds and tests fine on Debian sid (i386, this is with GCC 4.0) and
woody (i386, ia64).

Martin Schulze confirmed that CAN-2005-1849 was allocated for the
"ENOUGH is not enough" bug.  You should mention both CANs in the
ChangeLog file, for cross-reference purposes.

I wouldn't release the new version on Friday if I were you.  Friday is
a rather unusual day for security updates. 8-) Maybe you could ship a
final patch to the vendors on Friday, and delay the actual release til
Monday or Tuesday?  To be absolute sure, give an advance warning
<vendor-sec at lst.de>, a closed mailing list for prepublication
discussion of security vulnerabilities in free software.  All the
GNU/Linux distributors, *BDSs and so on should be on that list.




More information about the Zlib-devel mailing list