Zlib 1.2.9 Released, First Update In Three Years

[phoronix]

Phoronix: Zlib 1.2.9 Released, First Update In Three Years

Zlib 1.2.9 was released this weekend as the first update to this data compression library in more than three years...

http://www.phoronix.com/scan.php?page=news_item&px=zlib-1.2.9-Released

[cen1]

The less updates the better I guess. Zlib is used pretty much everywhere, if anything significant changed I'd have to fix a dozen projects of mine.

[xnor]

The less updates the better I guess. Zlib is used pretty much everywhere, if anything significant changed I'd have to fix a dozen projects of mine.

Why? The whole idea of dynamically linked libraries is to upgrade them without needing to touch every piece of software that uses them.

[cl333r]

Why? The whole idea of dynamically linked libraries is to upgrade them without needing to touch every piece of software that uses them.

When an app comes with zlib it must customize zlib's build system to that of the app. Especially if the apps ships with a lib that in turn ships with/depends on zlib.

[Delgarde]

When an app comes with zlib it must customize zlib's build system to that of the app. Especially if the apps ships with a lib that in turn ships with/depends on zlib.

But that's the point - why does the app come with zlib, instead of just relying on the system-installed version? Did nobody learn from 2002, when a major security issue was found in zlib, and hundreds of applications with bundled copies of zlib had to individually be updated to fix the bug?

[Illasera]

But that's the point - why does the app come with zlib, instead of just relying on the system-installed version? Did nobody learn from 2002, when a major security issue was found in zlib, and hundreds of applications with bundled copies of zlib had to individually be updated to fix the bug?

More than that, its about practice as well, will people start changing things when libJpeg or libPNG will update?
how about glibc? will people tweak their code because someone changed the memory copy function internally?
its a library for a reason,
they did not change the major version of that library for a reason,
the API remains the same for a reason.

As noted above , Essential libraries should be shared across the system and not installed as stand-alone,
For copy pasting different versions of the same library all over , We have windows for that.

[cl333r]

But that's the point - why does the app come with zlib, instead of just relying on the system-installed version? Did nobody learn from 2002, when a major security issue was found in zlib, and hundreds of applications with bundled copies of zlib had to individually be updated to fix the bug?

Windows

[rleigh]

Note 1.2.10 was just released to correct a couple of nasty bugs found after the 1.2.9 release.