From owner-freebsd-security  Sun Aug  4  5:21:24 2002
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 19C8A37B401
	for <freebsd-security@freebsd.org>; Sun,  4 Aug 2002 05:21:19 -0700 (PDT)
Received: from smx.pair.com (smx.pair.com [209.68.1.56])
	by mx1.FreeBSD.org (Postfix) with SMTP id 9BA8143E6A
	for <freebsd-security@freebsd.org>; Sun,  4 Aug 2002 05:21:18 -0700 (PDT)
	(envelope-from sigma@smx.pair.com)
Received: (qmail 82778 invoked by uid 1000); 4 Aug 2002 12:21:15 -0000
Message-ID: <20020804122115.82777.qmail@smx.pair.com>
From: sigma@smx.pair.com
Subject: zlib 1.1.4
To: freebsd-security@freebsd.org
Date: Sun, 4 Aug 2002 08:21:15 -0400 (EDT)
X-Mailer: ELM [version 2.4ME+ PL40 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


Is there some reason zlib 1.1.3 seems to be part of 4.6-STABLE?  cvsweb
shows 1.1.4 imported "on the vendor branch".  There was a major security
advisory in March 2002 for 1.1.3.  A diff suggests only minor changes
between the 1.1.4 source (from gzip.org) and the source used by 4.6-STABLE,
but it's still labeled 1.1.3, which is enough to raise questions.

Thanks,
Kevin


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message