From owner-freebsd-security  Tue Mar 12  7:37: 9 2002
Delivered-To: freebsd-security@freebsd.org
Received: from gw.nectar.cc (gw.nectar.cc [208.42.49.153])
	by hub.freebsd.org (Postfix) with ESMTP
	id 7568537B901; Tue, 12 Mar 2002 07:32:56 -0800 (PST)
Received: from madman.nectar.cc (madman.nectar.cc [10.0.1.111])
	by gw.nectar.cc (Postfix) with ESMTP
	id 0301970; Tue, 12 Mar 2002 09:32:04 -0600 (CST)
Received: (from nectar@localhost)
	by madman.nectar.cc (8.11.6/8.11.6) id g2CFW3v36336;
	Tue, 12 Mar 2002 09:32:03 -0600 (CST)
	(envelope-from nectar)
Date: Tue, 12 Mar 2002 09:32:03 -0600
From: "Jacques A. Vidrine" <nectar@FreeBSD.ORG>
To: "Brian F. Feldman" <green@FreeBSD.ORG>
Cc: freebsd-security@FreeBSD.ORG, jedgar@FreeBSD.ORG
Subject: Re: zlib and FreeBSD (was Re: RedHat advisory - RHSA-2002:026-35 zlib double free -- Is this 4.5-R-p1?)
Message-ID: <20020312153203.GG35955@madman.nectar.cc>
Mail-Followup-To: "Jacques A. Vidrine" <nectar@FreeBSD.org>,
	"Brian F. Feldman" <green@FreeBSD.ORG>, freebsd-security@FreeBSD.ORG,
	jedgar@FreeBSD.ORG
References: <20020312145337.GB35955@madman.nectar.cc> <200203121511.g2CFB3U10275@green.bikeshed.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <200203121511.g2CFB3U10275@green.bikeshed.org>
User-Agent: Mutt/1.3.27i
X-Url: http://www.nectar.cc/
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

On Tue, Mar 12, 2002 at 10:11:03AM -0500, Brian F. Feldman wrote:
> Yes, I plan on MFCing it soon, since I have it on my RELENG_4_5 desktop and 
> it seems to work just fine (as I imagine it darn well should).  Even though 
> we're not vulnerable, and the bug is fixed earlier, I want to be able to say 
> that we ship a known-good copy of zlib and have the version numbers there to 
> back it up.  Sound reasonable?

Yes, that's reasonable --- and thanks for the quick reaction!
... however, RELENG_4_[345] are already fixed.  But we still would
like to merge zlib in -STABLE.

Cheers,
-- 
Jacques A. Vidrine <n@nectar.cc>                 http://www.nectar.cc/
NTT/Verio SME          .     FreeBSD UNIX     .       Heimdal Kerberos
jvidrine@verio.net     .  nectar@FreeBSD.org  .          nectar@kth.se

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message