[cobalt-security] Double Free Bug in ZLIB Compression Library

[Barbara <thebizworkers@xxxxxxxxx>]

I may be wrong, but this vulnerability could turn out
to be a biggie... If I'm not mistaken, this effects
not only zlib, but most all of the following (if not
others);

* Apache
* gd
* libjpeg
* libpng
* libtiff
* python
* perl-Compress-Zlib
* perl-DBD-MySQL
* rpm
* openssh
* popt

I spent the day updating most all of these programs on
anohter RedHat (7.1) system.

If any of these are using zlib on the Cobalt's,
they'll all have to be updated as well. The chances of
hosing the GUI without Cobalt's support in addressing
these needed updates, is chilling...



__________________________________________________
Do You Yahoo!?
Try FREE Yahoo! Mail - the world's greatest free email!
http://mail.yahoo.com/