On 11 Apr 2008, at 15:39, William A. Rowe, Jr. wrote:
So if APR ships 1.3.0 - would we be prepared to accept 1.3.0 as the
new
minimum version, modulo the minor MMN bump?
-0.9
People who want 1.3 can get it for themselves.
People who want packages want stable. And there's stuff in 1.3
that falls way short of what wants to go into a packaged products.
Example: apr_dbd_freetds is wide open to SQL injection if used
as you would use AN Other driver, because of the prepared statements
implementation.
--
Nick Kew
