Updated: zlib-1.1.4-1

Charles Wilson cwilson@ece.gatech.edu
Tue Dec 31 07:35:00 GMT 2002

The zlib package has been updated to version 1.1.4-1.  zlib is a 
standard lossless compression library.  The 1.1.4 version of zlib fixes 
a 'double free' bug that could lead to heap corruption when untrusted, 
compressed data is fed to zlib.


- update to official 1.1.4 release

Charles Wilson
zlib volunteer maintainer for cygwin


To update your installation, click on the "Install Cygwin now" link
on the http://cygwin.com/ web page.  This downloads setup.exe to your
system.  Then, run setup and update the zlib package.

Note that we have recently stopped downloads from sources.redhat.com (
aka cygwin.com) due to bandwidth limitations.  This means that you
will  need to find a mirror which has this update.

In the US,
is a reliable high bandwidth connection.

In the UK,
is usually up-to-date within 48 hours.

If one of the above doesn't have the latest version of this package
then you can either wait for the site to be updated or find another

If you have questions or comments, please send them to the Cygwin
mailing list at: cygwin@cygwin.com .  I would appreciate if you would
use this mailing list rather than emailing me directly.  This includes
ideas and comments about the setup utility or Cygwin in general.

If you want to make a point or ask a question, the Cygwin mailing list
is the appropriate place.


If you want to unsubscribe from the cygwin-announce mailing list, look
at the "List-Unsubscribe: " tag in the email header of this message.
Send email to the address specified there.  It will be in the format:



o Now uses the auto-import functionality of newer binutils, and doesn't
use __declspec(dllimport).  This means you no longer need -DZLIB_STATIC
when compiling objects intended for static linking.  Just compile as normal.
HOWEVER, you need to use a special flag when linking statically:
'gcc -static'. For dynamic linking, you need no special link-time flags
(assuming you're using binutils newer than 20010930, when 
was made the default).

   -- PRO: no compile time flags needed when building
           client programs; ONLY need a link-time flag
           linking to static libraries.  NO special flags
           at compile-time nor link-time when linking to
           dynamic links.
   -- CON: (partial): if using binutils older than 20010930,
           you now need a special linktime flag for dynamic
           linking (-Wl,--enable-auto-import).  However,
           with an up-to-date binutils, you don't need this.

o The following packages have been converted from old style
"-DFOO_STATIC" to the new autoimport style of DLL structure:
   ncurses    readline    gettext    zlib
   libpng     xpm-nox     jpeg       tiff
   gdbm       jbig
The following package has not (yet) been converted, and
still needs -DFOO_STATIC for static builds:

More information about the Cygwin-announce mailing list