[Python-Dev] zlib 1.2.3 is just out

2005-07-23 Thread Scott David Daniels 
Note zlib 1.2.3 is just out -- the zlib compression/decompression

 http://www.zlib.net/

 From the page:
 Version 1.2.3 eliminates potential security vulnerabilities in zlib
 1.2.1 and 1.2.2, so all users of those versions should upgrade
 immediately. The following important fixes are provided in
 zlib 1.2.3 over 1.2.1 and 1.2.2:

 * Eliminate a potential security vulnerability when decoding
   invalid compressed data
 * Eliminate a potential security vulnerability when decoding
   specially crafted compressed data
 * Fix a bug when decompressing dynamic blocks with no distance codes
 * Fix crc check bug in gzread() after gzungetc()
 * Do not return an error when using gzread() on an empty file

I'd guess this belongs in 2.5, with a possible retrofit for 2.4.

--Scott David Daniels
[EMAIL PROTECTED]

___
Python-Dev mailing list
[email protected]
http://mail.python.org/mailman/listinfo/python-dev
Unsubscribe: 
http://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Re: [Python-Dev] zlib 1.2.3 is just out

2005-07-23 Thread Raymond Hettinger 
> Note zlib 1.2.3 is just out -- the zlib compression/decompression
 . . .

> I'd guess this belongs in 2.5, with a possible retrofit for 2.4.

+1 on backporting, but that is up to Anthony.


Raymond

___
Python-Dev mailing list
[email protected]
http://mail.python.org/mailman/listinfo/python-dev
Unsubscribe: 
http://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com