100540 2005-07-27 19:09 0000 dev-perl/Compress-Zlib 1.34 includes it's own vuln version of zlib 2005-08-20 11:14:26 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified All Linux RESOLVED FIXED B1 [glsa] jaervosz P2 major --- 1 solar@gentoo.org security@gentoo.org perl@gentoo.org solar@gentoo.org 2005-07-27 19:09:36 0000 Compress-Zlib-1.33 = zlib-1.1.4 (stable all arches) Compress-Zlib-1.34 = slib-1.2.2 (~arch vuln) Compress-Zlib-1.35 = zlib-1.2.3 (not vuln and not in the tree) solar@gentoo.org 2005-07-27 19:10:51 0000 Created an attachment (id=64485) Compress-Zlib-1.35 Updated version. vapier@gentoo.org 2005-07-27 19:54:01 0000 or even better, get the package to stop using the bundled one ... if you run a diff between the bundled version and a pristine zlib you'll see that there are no changes mcummings@gentoo.org 2005-07-28 02:14:57 0000 I hadn't realized Paul had posted the update, sorry about that folks (this was a topic on the porters list about a week ago). Ebuild should be in the tree in the next few minutes jaervosz@gentoo.org 2005-07-28 02:43:41 0000 Arches please test and mark Compress-Zlib-1.35 stable. corsair@gentoo.org 2005-07-28 03:34:46 0000 stable on ppc64 mcummings@gentoo.org 2005-07-28 03:37:05 0000 Stable on sparc and x86 blubb@gentoo.org 2005-07-28 04:02:00 0000 amd64 happy killerfox@gentoo.org 2005-07-28 04:09:32 0000 Stable on hppa dertobi123@gentoo.org 2005-07-28 10:29:50 0000 ppc stable matsuu@gentoo.org 2005-07-28 15:41:01 0000 stable on sh. vapier@gentoo.org 2005-07-30 03:04:21 0000 arm/ia64/s390 done kloeri@gentoo.org 2005-07-31 13:46:01 0000 Stable on alpha. jaervosz@gentoo.org 2005-07-31 23:07:16 0000 GLSA 200508-01 mips don't forget to mark stable. hardave@gentoo.org 2005-08-20 11:14:26 0000 Stable on mips. 64485 2005-07-27 19:10 0000 Compress-Zlib-1.35 Compress-Zlib-1.35.ebuild text/plain IyBDb3B5cmlnaHQgMTk5OS0yMDA1IEdlbnRvbyBGb3VuZGF0aW9uCiMgRGlzdHJpYnV0ZWQgdW5k ZXIgdGhlIHRlcm1zIG9mIHRoZSBHTlUgR2VuZXJhbCBQdWJsaWMgTGljZW5zZSB2MgojICRIZWFk ZXI6IC92YXIvY3Zzcm9vdC9nZW50b28teDg2L2Rldi1wZXJsL0NvbXByZXNzLVpsaWIvQ29tcHJl c3MtWmxpYi0xLjM0LmVidWlsZCx2IDEuMSAyMDA1LzA1LzEwIDAxOjI4OjQ5IGJldSBFeHAgJAoK aW5oZXJpdCBwZXJsLW1vZHVsZQoKREVTQ1JJUFRJT049IkEgWmxpYiBwZXJsIG1vZHVsZSIKSE9N RVBBR0U9Imh0dHA6Ly9jcGFuLnBhaXIuY29tL21vZHVsZXMvYnktbW9kdWxlL0NvbXByZXNzLyR7 UH0ucmVhZG1lIgpTUkNfVVJJPSJtaXJyb3I6Ly9jcGFuL21vZHVsZXMvYnktbW9kdWxlL0NvbXBy ZXNzLyR7UH0udGFyLmd6IgoKTElDRU5TRT0ifHwgKCBBcnRpc3RpYyBHUEwtMiApIgpTTE9UPSIw IgpLRVlXT1JEUz0ifmFscGhhIH5hbWQ2NCB+YXJtIH5ocHBhIH5pYTY0IH5tNjhrIH5taXBzIH5w cGMgfnBwYzY0IH5zMzkwIH5zaCB+c3BhcmMgfng4NiIKSVVTRT0iIgoKREVQRU5EPSJzeXMtbGli cy96bGliIgoKU1JDX1RFU1Q9ImRvIgoKbXlkb2M9IlRPRE8iCg==