[Zlib-devel] zlib 1.2.2 ready for release

Greg Roelofs newt at pobox.com
Mon Oct 4 00:54:34 EDT 2004


Cosmin,

>> Windoze files can wait if it's a "real" security fix...or is the
>> problem more smoke than fire?

> There is no problem with the working Windoze interface. There is just
> some disagreement regarding the support of the Visual Studio .Net
> environment.

I was referring to the security problem, not the Windows stuff.  That
is, it was never fully characterized (as far as I recall), and the fact
that an error might occur under some conditions does not in any way
guarantee that it can be exploited for privilege elevation or the like
--i.e., it's not _necessarily_ a security problem, just conceivably one.
(Of course, where there's a question about the matter, it's prudent not
to let it sit unfixed for very long...)

Cheers,
  Greg




More information about the Zlib-devel mailing list