Ethereal-dev: RE: [Ethereal-dev] Fun with zlib double-freeing

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "HOOD, Andy" <ahood@xxxxxxxxxxxxxx>
Date: Tue, 12 Mar 2002 10:47:12 +1100
The various Ethereal binaries are the only things I have installed that
explicitly refers to libz.so.1.1.3
Everything else asks for libz.so
Any particular reason for this?

Regards,
Andrew Hood
A distributed system is one in which the failure of a computer you didn't
even know existed can render your own computer unusable. -- Leslie Lamport,
as quoted in CACM, June 1992


-----Original Message-----
From:	Guy Harris [mailto:guy@xxxxxxxxxx]
Sent:	Tuesday, 12 March 2002 09:05
To:	ethereal-dev@xxxxxxxxxxxx
Subject:	Re: [Ethereal-dev] Fun with zlib double-freeing

	http://www.gzip.org/zlib/

"Current release: 
                                                                    
zlib 1.1.4 

This version fixes a potential security problem, see details here. Any
software that is linked against or derived from an earlier version of
zlib should be upgraded immediately."

_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev
	-------------------------------------------------------
NOTE:	  The attachment below was deleted because it had a
	  suspicious file name (winmail.dat).

	  It is the policy of this list to drop any message
	  attachments that may be executable.  See
	  http://www.ethereal.com/lists/#lists
	  for more details.
	-------------------------------------------------------
This message has been 'sanitized'.  This means that potentially
dangerous content has been rewritten or removed.  The following
log describes which actions were taken.

Sanitizer (start="1015890622"):
  Part (pos="1756"):
    SanitizeFile (filename="unnamed.txt", mimetype="text/plain"):
      Match (rule="2"):
        Enforced policy: accept

  Part (pos="2875"):
    SanitizeFile (filename="winmail.dat", mimetype="application/ms-tnef"):
      Match (rule="1"):
        Enforced policy: drop

      Replaced mime type with: text/plain
      Replaced file name with: MANGLED_ON_PURPOSE-285.txt

  Total modifications so far: 1


Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.32 2001/10/11 19:27:15 bre Exp $