Vulnerability Development: Re: New bugs discovered!

[Bernhard Rosenkraenzer <bero () redhat de>]

On Mon, 19 Nov 2001, Chris Ess wrote:

> > Current versions of gzip (1.3.x) are not vulnerable.
> I see nowhere on www.gzip.org mentioning a version 1.3.x.  It only
> mentions 1.2.4a
>
> Where would one go about finding the source for this?
ftp://alpha.gnu.org/gnu/gzip/

has versions up to 1.3.2.

Don't worry about the "alpha", 1.3 has passed Red Hat QA testing much 
better than the last so-called stable release.

LLaP
bero

-- 
This message is provided to you under the terms outlined at
http://www.bero.org/terms.html