The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

zlib security vulnerability ?

Discussion in 'Security' started by IRCBrasil, Nov 16, 2005.

  1. IRCBrasil

    IRCBrasil Well-Known Member

    Joined:
    Jul 22, 2004
    Messages:
    93
    Likes Received:
    0
    Trophy Points:
    156
    Hi, i was doing the cpanel update, when i saw this message:

    zlib version checking disabled. zlib versions <= 1.2.1 have a know security vulnerability
    See http://www.zlib.net/ for more information

    So, i did it:

    oot@matrix [/home/pousada/www]# rpm -qa |grep zlib
    zlib-1.1.4-8.1
    zlib-devel-1.1.4-8.1
    root@matrix [/home/pousada/www]#

    Well, if cpanel and/or up2date -u dont update zlib, can i do it by myself, or the cpanel must use the 1.1.4-8.1?

    Thanks people!
     
    #1 IRCBrasil, Nov 16, 2005
  2. PanelGuy

    PanelGuy Well-Known Member

    Joined:
    Oct 13, 2004
    Messages:
    106
    Likes Received:
    0
    Trophy Points:
    166
    ZLib and Fedora Core 4

    That's nice. They list Fedora Core 4 as effected, but only provide updates for Fedora core 3.
     
    #2 PanelGuy, Nov 16, 2005
  3. abubin

    abubin Well-Known Member

    Joined:
    Dec 7, 2004
    Messages:
    402
    Likes Received:
    3
    Trophy Points:
    168
    that's strange, my fc4 is using zlib-1.2.2.2-5.fc4. Though that is not my cpanel machine, I update only using yum.

    But yes, it's better to comfirm with cpanel on version compatibility before doing manual upgrades.

    And my Cpanel RHEL3 is still running zlib-1.1.4-8.1.
     
    #3 abubin, Nov 16, 2005
    Last edited: Nov 16, 2005
  4. IRCBrasil

    IRCBrasil Well-Known Member

    Joined:
    Jul 22, 2004
    Messages:
    93
    Likes Received:
    0
    Trophy Points:
    156
    yeh... my box is RHEL3 too.. i think i will wait more before update zlib, maybe 1.2 dont work.
     
    #4 IRCBrasil, Nov 16, 2005
  5. PanelGuy

    PanelGuy Well-Known Member

    Joined:
    Oct 13, 2004
    Messages:
    106
    Likes Received:
    0
    Trophy Points:
    166
    According to the documentation, anything over 1.2.1 has the bug. So why is there a patch for Fedora 3 from Red Hat, but they ignore FC4, even thought they confirm the problem in FC4 too.
     
    #5 PanelGuy, Nov 16, 2005
  6. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,472
    Likes Received:
    20
    Trophy Points:
    463
    Location:
    Go on, have a guess
    Remember a few things:

    1. RedHat backport security fixes into their code, so looking at the rpm version will give you no idea as to whether it's vulnerable or not, you would have to go through their errata pages.

    2. Fedora is a development OS is likely to have the latest version of most applications, as you exchanging stability for bleeding edge features. Fedora is also community supported, really, and isn't part of RedHat's support system anymore (though they use their resources and a lot of the developers work on Fedora too).
     
    #6 chirpy, Nov 17, 2005
(You must log in or sign up to post here.)
Loading...
Similar Threads - zlib security vulnerability
  1. ijsaul

    SOLVED Issues Enabling zlib For W3 Total Cache

    ijsaul, Apr 7, 2017, in forum: Workarounds and Optimization
    Replies:
    6
    Views:
    334
    Mostafa Hussein
    Jun 13, 2017
  2. Nirjonadda

    SOLVED Security Advisor scrolling in cPanel 66

    Nirjonadda, Jul 25, 2017 at 11:58 AM, in forum: General Discussion
    Replies:
    4
    Views:
    52
    cPanelMichael
    Jul 25, 2017 at 1:15 PM
  3. Droidism20011

    MySQL -> MariaDB security questions

    Droidism20011, Jul 20, 2017, in forum: Security
    Replies:
    3
    Views:
    84
    Droidism20011
    Jul 24, 2017 at 3:16 AM
  4. zoner

    SecRemoteRules - ModSecurity Vendor

    zoner, Jul 19, 2017, in forum: Security
    Replies:
    4
    Views:
    87
    quizknows
    Jul 25, 2017 at 11:30 AM
  5. Trane Francks

    EasyApache 3 security release for PHP 5.6.31?

    Trane Francks, Jul 11, 2017, in forum: EasyApache
    Replies:
    9
    Views:
    170
    cPanelMichael
    Jul 13, 2017

Share This Page