I was just looking around in package.mask to see if I forgot to get rid of something, and I've noticed that zsync is currently masked because it contains an internal _vulnerable_ copy of zlib.
It is currently maintainer-needed, so I don't see anybody actually fixing it to use system zlib anytime soon. Any reason why it isn't simply lastrited unless someone wants to maintain it? Treecleaners? -- Diego "Flameeyes" Pettenò http://blog.flameeyes.eu/ -- gentoo-dev@lists.gentoo.org mailing list