On Tue, Jul 15, 2014 at 10:56 AM, Bryan O'Sullivan <[email protected]> wrote:
> attoparsec has some security fixes in recent releases that depend on the > scientific package. It would be a very bad idea to continue with 0.10.4.0. > This is rather late to hear this... given that I plan to Alpha this weekend or sooner. Can you quantify the security fixes? Do they only revolve around floats?
_______________________________________________ ghc-devs mailing list [email protected] http://www.haskell.org/mailman/listinfo/ghc-devs
