Re: [Firebird-devel] Security vulnerability in zlib library

2022-04-01 Thread Vlad Khorsun
31.03.2022 11:11, Mark Rotteveel wrote: A security vulnerability was found in zlib: https://nakedsecurity.sophos.com/2022/03/29/zlib-data-compressor-fixes-17-year-old-security-bug-patch-errr-now/ Will we include an updated version in the next release? I'll take care about Windows builds

Re: [Firebird-devel] Security vulnerability in zlib library

2022-04-01 Thread Alex Peshkoff via Firebird-devel
On 4/1/22 01:30, Dimitry Sibiryakov wrote: Alex Peshkoff via Firebird-devel wrote 31.03.2022 16:08:   The crash happen when a stream of definite data is tried to be compressed. IMHO, it is hard (if possible at all) to purposefully construct such stream *from* server to crash or exploit it.