[tex-live] zlib vulnerability: upgrade to 1.1.4
Martin Schroeder
martin@oneiros.de
Tue, 12 Mar 2002 15:07:35 +0100
On 2002-03-11 17:59:10 -0700, Nelson Beebe wrote:
> In the TeX-Live 6 CD, there are no executables in
>
> bin/alphaev5-osf4.0d
> bin/mips-irix6.5
> bin/sparc-solaris2.7
>
> that refer to this library, according to ldd, but there might be in
> the upcoming TeX-Live 7 CD. This should be checked ASAP, for all
> supported binary distributions.
Done. pdf*tex link statically to zlib. It would be interesting to
see an exploit... :-)
Best regards
Martin
--
http://www.tm.oneiros.de/calendar/2002/