[FC1] Unofficial Updates to ZLIB

[James Kosin]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Mike Klinke wrote:

| On Monday 08 August 2005 09:21, James Kosin wrote:
|
|> JAMES'  Unofficial Unsupported by RedHat, Redhat Fedora Core, and
|>  Redhat Fedora Legacy Groups! ~    Any support for my packages,
|> will only come from me!  There is no bugzilla for the packages,
|> groups may not know what version you are talking about.  The
|> biggest support can come from ME or the source creators of the
|> program.  Although, any patches kept over from the Fedora Core
|> packages are not supported by the vendor of the software. ~    My
|> packages are usually re-packaged new versions of many programs.
|>
|>
|> ZLib 1.2.3 ------------
|
|
| Hmmmm, a private security fix?  I was under the impression that
| this is the kind of thing that's supposed to be addressed by the
| Fedora Legacy Project.  If so, isn't this going to be rather
| confusing?

Yes, and No at the same time.
These are repackaged versions of the ZLib package.
The version of ZLib for FC1 you have is correct... although, I believe
I've only seen one security fix in the current one.
The BUG fixes are nice; but, not a requirement for Fedora Legacy.

|
|> Version 1.2.3 eliminates potential security vulnerabilities in
|> zlib 1.2.1 and 1.2.2, so all users of those versions should
|> upgrade immediately. The following important fixes are provided
|> in zlib 1.2.3 over 1.2.1 and 1.2.2:
|
|
| For example, why is this identified with FC1 when the "current" FC1
|  zlib package that's been released (
| http://download.fedoralegacy.org/fedora/1/updates/i386/ ) is:
|
| rpm -qa | grep -i zlib zlib-1.2.0.7-2.1.legacy

This is correct!  Because the released packages for FC1 where based on
the zlib-1.2.0 software release from ZLib or an equivalent snapshot.
Not sure exactly which.
Since that release only patches have been added to the RPM,  which is
correctly done..  Major version bumps are rarely done and in some
cases frowned upon.  Because as you pointed out it causes confusion.
That said.....  Did you read all of my message?

|
|
| Regards, Mike Klinke
|
| -- fedora-legacy-list mailing list fedora-legacy-list at redhat.com
| http://www.redhat.com/mailman/listinfo/fedora-legacy-list
|
Thanks,
James
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
 
iD8DBQFC94CEkNLDmnu1kSkRAqdNAJ0ebM/nF7xNkUw9cOLPHHBfph2cKACaAgEp
rzEtyqAx59yL62NtihR9ssQ=
=iO66
-----END PGP SIGNATURE-----