On Thu, 08 May 2008 09:32:34 -0400 Doug Goldstein <[EMAIL PROTECTED]> wrote: > Ciaran McCreesh wrote: > > On Thu, 08 May 2008 09:17:08 -0400 > > Doug Goldstein <[EMAIL PROTECTED]> wrote: > >> It's troubling to me that projects are using lzma when it's on disk > >> format isn't even final and the project has security issues. > > > > You mean projects like 'GNU tar'? > > > As far as I know Ciaran, all GNU projects have switched or are in the > process of switching to lzma over bzip2. I believe the issue in > question which prompted this original e-mail was due to coreutils. > But I could be wrong.
You miss my point. GNU tar sometimes changes its on disk format (and will be doing so again at some point for xattrs), and it's had security issues. -- Ciaran McCreesh
signature.asc
Description: PGP signature