zlib security flaw

[z12]

According to this article here, http://www.eweek.com/article2/0,1895,1834632,00.asp

"A serious security flaw has been identified in Zlib,..."

Haven't heard much about this, and no mention about it on zlib's site, http://www.zlib.net/

I guess it's time to start keeping an eye open for an updated zlib thats compatible with proxomitron again.

Mike

[sidki3003]

z12 Wrote:Haven't heard much about this, and no mention about it on zlib's site, http://www.zlib.net/

They added a statement yesterday.

sidki

[Kye-U]

Quote:IMPORTANT NOTE: (July 10, 2005) A new security vulnerability has been discovered in which specially crafted input files can cause inflate to overwrite memory that follows the internal inflate state. This can cause the application to crash depending on what is overwritten. This vulnerability only affects versions 1.2.1 and 1.2.2. of zlib. Earlier versions, e.g. 1.1.4, are not affected.

A new version of zlib will be released soon to address this issue. Stay tuned.

Slow pokes

[ProxRocks]

Will someone please be so kind as to update this thread when a new zlib is released? (I mean, I'd see it here much sooner than at zlib.net...)

[sidki3003]

v1.2.3 is out - thanks to an attentive prox-list user.

http://www.winimage.com/zLibDll/

sidki

[ProxRocks]

AWESOME! Thanks...

[Kye-U]

This will work for Proxomitron?

[Guest]

Nothing blew up yet. Seems to work.

[Kye-U]

http://74.53.146.215/paFileDB/pafiledb.p...file&id=59

Uploaded to our database

[z12]

It's working fine.

Thanks for the heads up sidki.

Mike