Slashdot Mirror

← Back to Stories (view on slashdot.org)

Microsoft, zlib, and Security Flaws

Posted by timothy on from the not-the-security-initiative-we-had-in-mind dept.

nakhla writes: "News.com is reporting that Microsoft's use of code from the open-source zlib library has led to possible security problems. The flaws in zlib were reported recently, and apply to several key Microsoft technologies, such as DirectX, Front Page, Install Shield, Office, and Internet Explorer. The article also mentions how this is not Microsoft's first use of open-source code in its software, but does point out that since zlib is not GPL'd they are under no obligation to release the source code to any of their products."

3 of 470 comments (clear)

  1. Just waiting for the press release... by Nonesuch · · Score: 4, Funny

    Any bets on how long before Microsoft issues a press release noting that this is yet another risk of using evil open source and open standards?

    --

    I do not deploy Linux. Ever.
  2. Now what would have been interesting... by borgquite · · Score: 4, Funny

    is if when they released the patch for the security flaw they made the patch GPL... just imagine Microsoft having to recode all that stuff for themselves :)

    --
    ' Ore stabit fortis a fine placet ore stat '
    - found on a park bench
  3. Re:InstallShield by ChrisDolan · · Score: 5, Funny

    Similarly, IE is not written by Microsoft either. It's alien technology. It was discovered by a MS coder who stumbled on a crashed spacecraft while hiking in the woods in the mid-90s. Using him as a vessel, the program infected the Windows codebase and has grown since then, digging it's tendrils deeper and deeper into the system.

    So when MS says they can't remove IE from Windows, it's true.