27 Jan 2004

A vulnerability found in the error handling mechanisms of the decompression functions in the zlib compression library (more details..)

You can eliminate it by upgrading zlib to 1.2.2 from http://www.zlib.net. Make sure to perform this update on each Unix box of the H-Sphere cluster.

To compile it from source:

1. Log in as root and download the source:
Linux

wget http://www.zlib.net/zlib-1.2.2.tar.gz
FreeBSD

fetch http://www.zlib.net/zlib-1.2.2.tar.gz
2. Unpack the archive:
tar -zxf zlib-1.2.2.tar.gz
3. Enter the unpacked directory:
cd zlib-1.2.2
4. Configure and install the package:
./configure --prefix=/usr --shared && make && make install