zlib vulnerability

zlib vulnerability

[Janina Sajka]

This is an fyi to my colleagues here:

The cert page at http://www.kb.cert.org/vuls/id/368819


describes a vulnerability with the compression/decompression zlib. 
Probably only affects thos of us running web services, but still ...



-- 
	
				Janina Sajka, Director
				Technology Research and Development
				Governmental Relations Group
				American Foundation for the Blind (AFB)

Email: janina@afb.net		Phone: (202) 408-8175

Chair, Accessibility SIG
Open Electronic Book Forum (OEBF)
http://www.openebook.org

Re: zlib vulnerability

[Igor Gueths]

Hi Janina. Doesn't the xlib library only pertain to X? Because if this is the case, it doesn't pertain to us console users? Or do we still use that library? I don't think that this is the case, but correct me if I am wrong on this. 
----- Original Message ----- 
From: Janina Sajka <janina@afb.net>
To: <speakup@braille.uwo.ca>
Sent: Thursday, March 14, 2002 1:50 PM
Subject: zlib vulnerability


> This is an fyi to my colleagues here:
> 
> The cert page at http://www.kb.cert.org/vuls/id/368819
> 
> 
> describes a vulnerability with the compression/decompression zlib. 
> Probably only affects thos of us running web services, but still ...
> 
> 
> 
> -- 
> 
> Janina Sajka, Director
> Technology Research and Development
> Governmental Relations Group
> American Foundation for the Blind (AFB)
> 
> Email: janina@afb.net Phone: (202) 408-8175
> 
> Chair, Accessibility SIG
> Open Electronic Book Forum (OEBF)
> http://www.openebook.org
> 
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com

Re: zlib vulnerability

[Janina Sajka]

No, not just X. It has to do with compressing and uncompressing files. 
But, you can probably be trusted not to harm your own machine 
intentionally! <grin> So, it seems the vulnerability applies to web 
pages--and then only under certain circumstances.

I provided the url in my last message. If you have Pine or Mutt going, you 
should be able to just press enter while on that line to go read about 
this at CERT.
 On Thu, 14 Mar 2002, Igor Gueths wrote:

> Hi Janina. Doesn't the xlib library only pertain to X? Because if this is the case, it doesn't pertain to us console users? Or do we still use that library? I don't think that this is the case, but correct me if I am wrong on this. 
> ----- Original Message ----- 
> From: Janina Sajka <janina@afb.net>
> To: <speakup@braille.uwo.ca>
> Sent: Thursday, March 14, 2002 1:50 PM
> Subject: zlib vulnerability
> 
> 
> > This is an fyi to my colleagues here:
> > 
> > The cert page at http://www.kb.cert.org/vuls/id/368819
> > 
> > 
> > describes a vulnerability with the compression/decompression zlib. 
> > Probably only affects thos of us running web services, but still ...
> > 
> > 
> > 
> > -- 
> > 
> > Janina Sajka, Director
> > Technology Research and Development
> > Governmental Relations Group
> > American Foundation for the Blind (AFB)
> > 
> > Email: janina@afb.net Phone: (202) 408-8175
> > 
> > Chair, Accessibility SIG
> > Open Electronic Book Forum (OEBF)
> > http://www.openebook.org
> > 
> > 
> > _______________________________________________
> > Speakup mailing list
> > Speakup@braille.uwo.ca
> > http://speech.braille.uwo.ca/mailman/listinfo/speakup
> 
> 
> _________________________________________________________
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com
> 
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
> 

-- 
	
				Janina Sajka, Director
				Technology Research and Development
				Governmental Relations Group
				American Foundation for the Blind (AFB)

Email: janina@afb.net		Phone: (202) 408-8175

Chair, Accessibility SIG
Open Electronic Book Forum (OEBF)
http://www.openebook.org