[vox-tech] gzip bug?

[Peter Jay Salzman]

begin Charles Polisher <cpolish@attbi.com> 
> On Thu, Mar 14, 2002 at 11:14:08PM -0800, Kevin Dawson wrote:
> > 
> > - Can you run md5sum `which gzip` `which gunzip`?
> >   Perhaps someone running your version of Redhat can verify your
> >   executables are not corrupted.
> > 
> > Ocae 9777 548d 5dcb 6179 5599 6f51 3525
> 
> On a freshly d/l'd and verified gzip package for RH 7.2, I get:
> 
>  6d13ebd9d0255cd1d51565ff4c1a55f9 
> 
> (using rpm -qilp --dump gzip-1.3-15.i386.rpm)
> 
> Unexpectedly, gzip *doesn't* appear on anyone's list for 
> packages affected by the zlib 'double free' vulnerability,
> so I believe that's not at issue here.
 
yeah, before i replied to this message, i checked what libraries gzip is
linked against -- it's just linked against libc, and not zlib (which is
odd.  i was expecting zlib.)

pete