From owner-freebsd-questions@FreeBSD.ORG Thu Apr 13 00:26:43 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 73C5816A401 for ; Thu, 13 Apr 2006 00:26:43 +0000 (UTC) (envelope-from tedm@toybox.placo.com) Received: from mail.freebsd-corp-net-guide.com (mail.web-strider.com [65.75.192.90]) by mx1.FreeBSD.org (Postfix) with ESMTP id 04FA043D49 for ; Thu, 13 Apr 2006 00:26:42 +0000 (GMT) (envelope-from tedm@toybox.placo.com) Received: from tedwin2k (nat-rtr.freebsd-corp-net-guide.com [65.75.197.130]) by mail.freebsd-corp-net-guide.com (8.11.1/8.11.1) with SMTP id k3D0QCu69981; Wed, 12 Apr 2006 17:26:13 -0700 (PDT) (envelope-from tedm@toybox.placo.com) From: "Ted Mittelstaedt" To: "Kris Kennaway" , "Alex Zbyslaw" Date: Wed, 12 Apr 2006 17:26:12 -0700 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1250" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) In-Reply-To: <20060412175317.GA24157@xor.obsecurity.org> Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506 Cc: freebsd-questions@freebsd.org Subject: RE: upcoming release 6.1: old version of some core components X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Apr 2006 00:26:43 -0000 >-----Original Message----- >From: Kris Kennaway [mailto:kris@obsecurity.org] >Sent: Wednesday, April 12, 2006 10:53 AM >To: Alex Zbyslaw >Cc: Ted Mittelstaedt; freebsd-questions@freebsd.org >Subject: Re: upcoming release 6.1: old version of some core components > >> >> So unless the fixes somehow were un-made for 6.1, zlib is not >> vulnerable, regardless of whether the version number is 1.2.2 >or 1.2.3. > >Yes, Ted is wrong. > Are you being an idiot deliberately or did you just miss the e-mail I sent yesterday 4-11 at 2:57pm where I said this security hole had been caught? Ted