zlib security vulnerability ?

ZLib and Fedora Core 4

That's nice. They list Fedora Core 4 as effected, but only provide updates for Fedora core 3.

 

that's strange, my fc4 is using zlib-1.2.2.2-5.fc4. Though that is not my cpanel machine, I update only using yum.

But yes, it's better to comfirm with cpanel on version compatibility before doing manual upgrades.

And my Cpanel RHEL3 is still running zlib-1.1.4-8.1.

 

According to the documentation, anything over 1.2.1 has the bug. So why is there a patch for Fedora 3 from Red Hat, but they ignore FC4, even thought they confirm the problem in FC4 too.

 

Remember a few things:

1. RedHat backport security fixes into their code, so looking at the rpm version will give you no idea as to whether it's vulnerable or not, you would have to go through their errata pages.

2. Fedora is a development OS is likely to have the latest version of most applications, as you exchanging stability for bleeding edge features. Fedora is also community supported, really, and isn't part of RedHat's support system anymore (though they use their resources and a lot of the developers work on Fedora too).