From owner-freebsd-security Tue Mar 12 8:30:55 2002 Delivered-To: freebsd-security@freebsd.org Received: from peitho.fxp.org (peitho.fxp.org [209.26.95.40]) by hub.freebsd.org (Postfix) with ESMTP id 6453137B670; Tue, 12 Mar 2002 08:30:34 -0800 (PST) Received: by peitho.fxp.org (Postfix, from userid 1000) id CE0FA13669; Tue, 12 Mar 2002 10:28:37 -0500 (EST) Date: Tue, 12 Mar 2002 10:28:37 -0500 From: Chris Faulhaber To: "Jacques A. Vidrine" , freebsd-security@FreeBSD.ORG, green@freebsd.org Subject: Re: zlib and FreeBSD (was Re: RedHat advisory - RHSA-2002:026-35 zlib double free -- Is this 4.5-R-p1?) Message-ID: <20020312152837.GC94019@peitho.fxp.org> References: <20020311154424.A22882@sheol.localdomain> <64040.1015886430@critter.freebsd.dk> <20020312145337.GB35955@madman.nectar.cc> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="4jXrM3lyYWu4nBt5" Content-Disposition: inline In-Reply-To: <20020312145337.GB35955@madman.nectar.cc> User-Agent: Mutt/1.3.24i Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --4jXrM3lyYWu4nBt5 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Mar 12, 2002 at 08:53:37AM -0600, Jacques A. Vidrine wrote: > In addition to Poul-Henning's information below, the zlib bug was also > patched in the security branches around February 22nd ``just in > case.'' Likewise, similar code in the kernel was fixed > (sys/net/zlib.c). >=20 > Hmm, I just noticed that for some reason, the fixes don't seem to have > been committed to -CURRENT or -STABLE. Maybe Chris had a reason for > this. It may be a moot point soon, as Brian has recently imported the > new (fixed) zlib into -CURRENT, and I imagine he will merge it into > -STABLE before long. >=20 I committed fixes to HEAD, RELENG_4, and RELENG_[345] for both src/lib/libz/infblock.c and src/net/zlib.c in February. Did I miss something? --=20 Chris D. Faulhaber - jedgar@fxp.org - jedgar@FreeBSD.org -------------------------------------------------------- FreeBSD: The Power To Serve - http://www.FreeBSD.org --4jXrM3lyYWu4nBt5 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: FreeBSD: The Power To Serve iEYEARECAAYFAjyOHqUACgkQObaG4P6BelDQKACfR2AFMxdJOzm2gfoeGe4uUWnf /9MAnjOvqD70AfOnBSsXQnHqnN1Im4L7 =NY5q -----END PGP SIGNATURE----- --4jXrM3lyYWu4nBt5-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message