Factbites
 Where results make sense
About us   |   Why use us?   |   Reviews   |   PR   |   Contact us  

Topic: Zlib


Related Topics
KSL
VII
ISK

In the News (Mon 16 Nov 09)

  
  Zlib - Wikipedia, the free encyclopedia
zlib is an open-source, cross-platform data compression library by Jean-loup Gailly and Mark Adler and is an abstraction of the DEFLATE compression algorithm used in their gzip file compression program.
Today, zlib is something of a de facto standard, to the point that zlib and DEFLATE are often used interchangeably in standards documents.
zlib is also used in many embedded devices because the code is portable and because the library has a relatively small memory footprint.
en.wikipedia.org /wiki/Zlib   (252 words)

  
 Zlib -- Facts, Info, and Encyclopedia article   (Site not responding. Last check: 2007-10-22)
zlib is an (additional info and facts about open-source) open-source, (additional info and facts about cross-platform) cross-platform, general-purpose (additional info and facts about data compression) data compression library implementing the (additional info and facts about DEFLATE) DEFLATE compression (A precise rule (or set of rules) specifying how to solve some problem) algorithm.
zlib has become something of a (additional info and facts about de facto) de facto standard.
Hundreds of applications for (Trademark for a powerful operating system) Unix-like operating systems (such as (An open-source version of the UNIX operating system) Linux) rely on it for compression, and it is increasingly used on other platforms, such as (additional info and facts about Microsoft Windows) Microsoft Windows.
www.absoluteastronomy.com /encyclopedia/z/zl/zlib.htm   (125 words)

  
 SourceForge.net CVS Repository - markup - cvs: pw2/zlib/README   (Site not responding. Last check: 2007-10-22)
The data format used by the zlib library is described by RFCs (Request for Comments) 1950 to 1952 in the files ftp://ds.internic.net/rfc/rfc1950.txt (zlib format), rfc1951.txt (deflate format) and rfc1952.txt (gzip format).
The zlib home page is http://www.cdrom.com/pub/infozip/zlib/ The official zlib ftp site is ftp://ftp.cdrom.com/pub/infozip/zlib/ Before reporting a problem, please check those sites to verify that you have the latest version of zlib; otherwise get the latest version and check whether the problem still exists or not.
Mark Nelson wrote an article about zlib for the Jan. 1997 issue of Dr. Dobb's Journal; a copy of the article is available in http://web2.airmail.net/markn/articles/zlibtool/zlibtool.htm The changes made in version 1.1.3 are documented in the file ChangeLog.
cvs.sourceforge.net /viewcvs.py/pw2/zlib/README?view=markup   (798 words)

  
 freshmeat.net: Project details for zlib
zlib is designed to be a free, general-purpose, legally unencumbered, lossless data-compression library for use on virtually any computer hardware and operating system.
The zlib data format is itself portable across platforms.
Unlike the LZW compression method used in Unix compress(1), the compression method currently used in zlib essentially never expands the data.
freshmeat.net /projects/zlib   (240 words)

  
 [No title]   (Site not responding. Last check: 2007-10-22)
Applications linking statically with zlib 1.1.3 or earlier, or using their own copy of zlib, must be recompiled even if you think your system protects you from double frees.
Early versions of zlib up to 1.0.8 do not have this double free problem, but have other problems that are fixed in later versions, so these early versions must be upgraded as well.
This led to the release of zlib 1.1.4 on March 11, 2002 to eliminate the vulnerability, and the release by Jeffrey Lanza of CERT Advisory CA-2002-07 on March 12, 2002.
www.gzip.org /zlib/advisory-2002-03-11.txt   (538 words)

  
 Frequently Asked Questions about zlib   (Site not responding. Last check: 2007-10-22)
The compress and deflate functions produce data in the zlib format, which is different and incompatible with the gzip format.
The zlib format on the other hand was designed for in-memory and communication channel applications, and has a much more compact header and trailer and uses a faster integrity check than gzip.
So even though the "deflate" transfer encoding using the zlib format would be the more efficient approach (and in fact exactly what the zlib format was designed for), using the "gzip" transfer encoding is probably more reliable due to an unfortunate choice of name on the part of the HTTP 1.1 authors.
www.zlib.net /zlib_faq.html   (2155 words)

  
 CERT Advisory CA-2002-07 Double Free Bug in zlib Compression Library
There is a bug in the zlib compression library that may manifest itself as a vulnerability in programs that are linked with zlib.
The zlib compression library is freely available and used by many vendors in a wide variety of applications.
The zlib code in XFree86 has been fixed in the CVS repository (trunk and the xf-4_2-branch branch) as of 14 February 2002.
www.cert.org /advisories/CA-2002-07.html   (2659 words)

  
 M-062: Double Free Bug in zlib Compression Library
Systems Affected Any software that is linked to zlib 1.1.3 or earlier may be affected Data compression libraries derived from zlib 1.1.3 or earlier may contain a similar bug Overview There is a bug in the zlib compression library that may manifest itself as a vulnerability in programs that are linked with zlib.
These are the MD5 checksums for zlib version 1.1.4: abc405d0bdd3ee22782d7aa20e440f08 zlib-1.1.4.tar.gz 9bf1d36ced334b0cf1f996f5c8171018 zlib114.zip The maintainers of zlib have published an advisory regarding this issue; for further information, please see http://www.gzip.org/zlib/advisory-2002-03-11.txt Apply a patch from your vendor The zlib compression library is freely available and used by many vendors in a wide variety of applications.
The updates will include a new version of zlib itself and also other packages which include their own version of zlib or are linked statically to the system-wide copy of zlib.
www.ciac.org /ciac/bulletins/m-062.shtml   (2741 words)

  
 ISS X-Force Database: zlib-gzprintf-bo(11381): zlib gzprintf buffer overflow
zlib version 1.1.4-1 and possibly other versions are vulnerable to a denial of service attack, caused by a buffer overflow in the gzprintf function.
By passing 4096 or more bytes to the gzprintf function in zlib, a local attacker could overflow a buffer and cause zlib to crash or execute arbitrary code on the system with elevated privileges.
CVE-2003-0107: Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
xforce.iss.net /xforce/xfdb/11381   (656 words)

  
 Compress::Zlib   (Site not responding. Last check: 2007-10-22)
As with the zlib equivalent, the mode parameter is used to specify both whether the file is opened for reading or writing and to optionally specify a a compression level.
The return value will be the zlib error number when used in a numeric context and the zlib error message when used in a string context.
The zlib function inflate, and so the inflate method supplied in this module, assume that there is at leat one trailing byte after the compressed data stream.
embnet.cifn.unam.mx /perl-doc/Compress/Zlib.html   (2363 words)

  
 Zlib compression library double free bug could allow arbitrary code
The zlib compression library is an open-source loss less data-compression library that can be used on virtually any computer hardware and operating system to provide in-memory compression and decompression functions.
Zlib has been ported and modified to work on a wide variety of operating systems and applications.
A bug in the zlib compression library has been posted and widely discussed that can cause programs linked to zlib to be vulnerable.
securityresponse.symantec.com /avcenter/security/Content/1720index.html   (729 words)

  
 Gentoo Linux Documentation -- zlib: Buffer overflow
zlib is vulnerable to a buffer overflow which could potentially lead to execution of arbitrary code.
zlib is a widely used free and patent unencumbered data compression library.
zlib improperly handles invalid data streams which could lead to a buffer overflow.
www.gentoo.org /security/en/glsa/glsa-200507-19.xml   (103 words)

  
 TIP #234 Version 1.5: Add Support For Zlib Compression   (Site not responding. Last check: 2007-10-22)
The Zlib compression algorithm is a widely used method for compression of files and streams.
Including support for zlib compression in the core would enable the use of compressed VFS files, pure Tcl implementations of gzip and zip utilities and the use of compression in various network protocols.
Because zlib is to be implemented as a core package, applications will need to do a [package require zlib] or the C equivalent.
www.tcl.tk /cgi-bin/tct/tip/view/234?ver=1.5   (1753 words)

  
 7.15 zlib -- Compression compatible with gzip   (Site not responding. Last check: 2007-10-22)
The zlib library has its own home page at http://www.gzip.org/zlib/.
There are known incompatibilities between the Python module and versions of the zlib library earlier than 1.1.3; 1.1.3 has a security vulnerability, so we recommend using 1.1.4 or later.
Its absolute value should be between 8 and 15 for the most recent versions of the zlib library, larger values resulting in better compression at the expense of greater memory usage.
www.python.org /doc/current/lib/module-zlib.html   (807 words)

  
 RFC 1950 (rfc1950) - ZLIB Compressed Data Format Specification version 3.3   (Site not responding. Last check: 2007-10-22)
When the zlib data format is used as part of another standard data format, the compressor may use only preset dictionaries that are specified by this other data format.
When the zlib data format is being used as a part of another standard format, a compliant decompressor must support all the preset dictionaries specified by the other format.
Source code Source code for a C language implementation of a "zlib" compliant library is available at ftp://ftp.uu.net/pub/archiving/zip/zlib/.
www.faqs.org /rfcs/rfc1950.html   (1892 words)

  
 zlib License   (Site not responding. Last check: 2007-10-22)
/* zlib.h -- interface of the 'zlib' general purpose compression library version 1.2.2, October 3rd, 2004 Copyright (C) 1995-2004 Jean-loup Gailly and Mark Adler This software is provided 'as-is', without any express or implied warranty.
In no event will the authors be held liable for any damages arising from the use of this software.
zlib software copyright © 1995-2004 Jean-loup Gailly and Mark Adler.
www.gzip.org /zlib/zlib_license.html   (195 words)

  
 zlib Home Site   (Site not responding. Last check: 2007-10-22)
Not surprisingly, the compression algorithm used in zlib is essentially the same as that in gzip and Zip, namely, the `deflate' method that originated in PKWARE's PKZIP 2.x.
For now this page is mainly a pointer to zlib itself and to the official zlib and deflate documentation.
Note that zlib is an integral part of libpng and has been tested extensively as part of many PNG-supporting applications.
www.zlib.net   (1148 words)

  
 The Fedora Legacy Project
Topic: An updated zlib package that fixes a security flaw is now available.
Zlib is a general-purpose, patent-free, lossless data compression library which is used by many different programs.
Users of zlib are advised to upgrade to this errata package, which contains a backported patch correcting this issue.
www.fedoralegacy.org /updates/FC1/2005-02-23-FLSA_2005_2043__Updated_zlib_package_fixes_security_issues.html   (429 words)

  
 Linux: zlib   (Site not responding. Last check: 2007-10-22)
The zlib library is a general purpose data compression library.
Questions about zlib should be sent to: zlib@quest.jpl.nasa.gov or, if this fails, to the author addresses given below.
The zlib home page is: Version 1.1.4 Copyright (C) 1995-2002 Jean-loup Gailly (jloup@gzip.org) and Mark Adler (madler@alumni.caltech.edu).
www.linuxforum.com /man/zlib.3.php?open_left=true   (359 words)

  
 Zlib - Looking the Gift Code in the Mouth
zlib is a library of C routines that can be used to compress or expand files using the same deflate algorithm popularized by PKZIP 2.0.
One of the driving reasons behind zlib's creation was for use as the compressor for PNG format graphics.
The zlib version of the deflate algorithm was embraced by PNG developers, not only because it was free, but it also compressed better than the original LZW compressor used in GIF files.
www.dogma.net /markn/articles/zlibtool/zlibtool.htm   (2271 words)

  
 Microsoft's borrowed code may pose risk | CNET News.com
As reported earlier this week by CNET News.com, a flaw in the zlib software-compression library could leave much of the systems based on the open-source operating system Linux open to attack.
The zlib library has been a fundamental open-source software component for almost a decade and can be found in almost every Linux and Unix system.
The license under which the zlib library is published on the Internet allows any company to use the code in any way it likes.
news.com.com /2100-1001-860328.html   (1207 words)

  
 ZLIB DLL Home Page
ZLIB is a compression library compatible with the gzip format.
NEW: the source distribution of the zlib DLL is now merged with the standard zlib.
If you want the complete version history for zLib (from 0.95 to 1.1.4), get the multiversion archive zlib.svf, or, from 0.95 to 1.23, zlibnew.svf, and open it with SmartVersion.
www.winimage.com /zLibDll   (766 words)

  
 ISS X-Force Database: zlib-inflate-inflateback-dos(17119): zlib inflate and inflateback denial of service
zlib versions 1.2.1.1 through 1.2.1.3 are vulnerable to a denial of service attack, caused by improper handling of errors in the inflate and inflateback functions.
Upgrade to the latest version of zlib (1.2.1-r3 or later), as listed in Gentoo Linux Security Advisory GLSA 200408-26.
CERT Vulnerability Note VU#238678, The zlib compression library is vulnerable to a denial-of-service condition at http://www.kb.cert.org/vuls/id/238678.
xforce.iss.net /xforce/xfdb/17119   (613 words)

  
 Gzstream Library Home Page
Gzstream is a small C++ library, basically just a wrapper, that provides the functionality of the zlib C-library in a C++ iostream.
Gzstream requires a standard compliant C++ compiler (we use the new header file conventions and the new iostream in the std:: name space) and, of course, zlib.
zlib home page for why you should upgrade to zlib 1.1.4.
www.cs.unc.edu /Research/compgeom/gzstream   (349 words)

  
 Discovering copies of zlib
Note that this does not imply that zlib is a virus or some other kind of malware.
If a signature does not uniquely identify a particular zlib version, a range of version numbers is given in the signature name.
As a result, they are not very useful for identifying zlib version, but they might be useful for other purposes.
www.enyo.de /fw/security/zlib-fingerprint   (647 words)

  
 OpenPKG: Security Advisory [OpenPKG-SA-2004.038-zlib]
If you have the "zlib" package installed and its version is affected (see above), we recommend that you immediately upgrade it (see Solution) and its dependent packages (see above) as well [3][4].
Only updating the "zlib" package is NOT sufficient because of the statically linked old "libz.a" code residing in the executables of other dependent packages.
Due to transitive dependencies and because "zlib" is used by such many other libraries and programs, the convenient way to upgrade "zlib" and all affected packages is to use the "openpkg-tools" package: $ su - # /bin/openpkg build -Ua
www.openpkg.org /security/OpenPKG-SA-2004.038-zlib.html   (364 words)

  
 [Announce] GnuPG fix for included zlib
As you probably all know, a security problem with the compress library zlib has been found which affects a lot of software.
GnuPG does also use zlib; however in most environments the system provided zlib is used.
Please note that on most systems the zlib code which comes with GnuPG is not used because usually the zlib provided by the system is used.
lists.gnupg.org /pipermail/gnupg-devel/2002-March/006878.html   (532 words)

Try your search on: Qwika (all wikis)

Factbites
  About us   |   Why use us?   |   Reviews   |   Press   |   Contact us  
Copyright © 2005-2007 www.factbites.com Usage implies agreement with terms.