Bug#402042: CVE 2006 4334 taken care of in 1.3.7+ ?

2006-12-08 Thread Bdale Garbee
On Thu, 2006-12-07 at 09:47 -0800, Paul Eggert wrote: I don't know why two markedly different patches were applied, but I assume that either set will do, and I took the 1.3.5-15 patches as being simpler and easier to understand. I think that should be ok. Patches for security issues in the

Bug#402042: CVE 2006 4334 taken care of in 1.3.7+ ?

2006-12-07 Thread Paul Eggert
Package: gzip Version: 1.3.5-15 Mike Frysinger [EMAIL PROTECTED] writes about ftp://alpha.gnu.org/gnu/gzip/gzip-1.3.7.tar.gz as follows: the attached patch [mostly] applies to current CVS ... i'm not familiar with gzip/zlib code so better to let the experts decide if this issue has been