Newsgroups : Borland : borland.public.delphi.rtl.win32 : 2005 Jul : ZLib Security Flaw

www.cryer.info
Managed Newsgroup Archive

ZLib Security Flaw

Subject:ZLib Security Flaw
Posted by:"Dwight Fowler" (ask..@askmenicely.com)
Date:Tue, 12 Jul 2005 14:34:39

Hey,

Does anyone know if Delphi's ZLib.pas is affected by the security flaw they
recently found in ZLib 1.2.2? The source code in my good ol' Delphi 7
Enterprise says it's using zlib version is 1.0.4. I am hoping that it is too
old to be affected, but it does open up a lot of questions about what
security holes exist in the library since it is so old. I noticed that
Borland compiled the object files used to build the library and that the
routines are externally linked. So, are we stuck having to go out and get a
third-party library to cover ourselves?

Just thought the community might want to know.

Replies:

www.cryer.info
Managed Newsgroup Archive