[Zlib-devel] zlib 1.2.2 ready for release
Greg Roelofs
newt at pobox.com
Mon Oct 4 00:54:34 EDT 2004
Cosmin,
>> Windoze files can wait if it's a "real" security fix...or is the
>> problem more smoke than fire?
> There is no problem with the working Windoze interface. There is just
> some disagreement regarding the support of the Visual Studio .Net
> environment.
I was referring to the security problem, not the Windows stuff. That
is, it was never fully characterized (as far as I recall), and the fact
that an error might occur under some conditions does not in any way
guarantee that it can be exploited for privilege elevation or the like
--i.e., it's not _necessarily_ a security problem, just conceivably one.
(Of course, where there's a question about the matter, it's prudent not
to let it sit unfixed for very long...)
Cheers,
Greg
More information about the Zlib-devel
mailing list