zlib 1.1.4 is out (was: Re: Patch: update zlib/* to 1.1.3)

Jos Backus josb at cncdsl.com
Tue Mar 12 09:13:55 EST 2002


I wrote:
> > Hopefully they will accept your patch and there will be a 1.1.4 release,
> > which also incorporates the infblock.c fixes. It would be bad to have
> > different (broken) versions of zlib out there when this can easily be
> > avoided.

http://www.gzip.org/zlib/ says

    Version 1.1.4 fixes a double-free bug which creates a potential security
    problem described here. 

    The beta version 1.1.5beta (to be released shortly) includes many more
    changes. A new official version 1.1.5 will be released as soon as
    extensive testing has been completed on it. See the ChangeLog for details.
    NOTE: zlib 1.1.4 does not support window sizes of 256 bytes (windowBits ==
    8). A 512-byte window is the smallest the encoder can use. (Most
    applications use the default 32,768-byte window size for best
    compression.)

Now wouldn't be grand if the rsync modifications made it into that version?

-- 
Jos Backus                 _/  _/_/_/        Santa Clara, CA
                          _/  _/   _/
                         _/  _/_/_/             
                    _/  _/  _/    _/
josb at cncdsl.com     _/_/   _/_/_/            use Std::Disclaimer;




More information about the rsync mailing list