zlib vulnerability

http://secunia.com/advisories/15949/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2096

I've submitted a patch for zlib:

<https://www.rocklinux.net/submaster/smadm.cgi?i=2005071015401216666>

but I thought I would have a grep for any other occurrences of the
offending file in the download directory of a recent svn checkout of
Rock 2.1. There are quite a few of them. Many of them contain zlib 1.1
code - this is very different to the zlib 1.2 code that contains the
released vulnerability. First is a list of all tarballs containing a
copy of inftrees.c, then a list of those 12 files that contain a line
matching the patch for zlib 1.2.2

$ find download/ -type f -name "*.bz2" | while read f; do tar xvf $f "*/inftrees.c"; done

./zlib-1.2.2/inftrees.c
./linux-2.4.30/lib/zlib_inflate/inftrees.c
./linux-2.6.11.10/lib/zlib_inflate/inftrees.c
./wxPython-src-2.5.3.1/src/zlib/inftrees.c
./xine-lib-1.0/win32/contrib/zlib/inftrees.c
./xmame-0.88/src/zlib/inftrees.c
./cvs-1.11.17/zlib/inftrees.c
./bacula-1.33.3-16Feb04/src/win32/zlib/inftrees.c
./bzflag-2.0.0.20050117/src/zlib/inftrees.c
./dictd-1.9.14/zlib/inftrees.c
./doxygen-1.4.1/libpng/inftrees.c
./paragui-1.0.4/src/physfs/zlib114/inftrees.c
./prboom-2.3.1/ViddSys/zlib/inftrees.c
./vnc-4.0-unixsrc/zlib/inftrees.c
./abiword-2.2.3/zlib/inftrees.c
./gridengine/source/3rdparty/zlib/inftrees.c
./sword-1.5.7/src/utilfuns/zlib/inftrees.c
./syslinux-3.07/com32/lib/zlib/inftrees.c
./Tk-804.027/PNG/zlib/inftrees.c
./mozilla/security/nss/cmd/zlib/inftrees.c
./mozilla/modules/zlib/src/inftrees.c
./freetype-2.1.9/src/gzip/inftrees.c
./gcc-3.2.3/zlib/inftrees.c
./gcc-3.3.5/zlib/inftrees.c
./gcc-3.4.3/zlib/inftrees.c
./gcc-4.0.0/zlib/inftrees.c
./gcc-4.1-20050424/zlib/inftrees.c
./gnupg-1.4.0/zlib/inftrees.c
./mysql-4.1.10a/zlib/inftrees.c
./id3lib-3.8.3/zlib/src/inftrees.c
./tetex-src-3.0/libs/zlib/inftrees.c
./qt-x11-free-3.3.4/src/3rdparty/zlib/inftrees.c
./rpm-4.1/zlib/inftrees.c
./rsync-2.6.3/zlib/inftrees.c
./root/zip/src/inftrees.c
./scorched/src/zlib/inftrees.c
./Compress-Zlib-1.33/zlib-src/inftrees.c
./xc/extras/freetype2/src/gzip/inftrees.c
./xc/extras/zlib/inftrees.c

$ grep -lr "left.*0.*type.*CODES" .

./zlib-1.2.2/inftrees.c
./wxPython-src-2.5.3.1/src/zlib/inftrees.c
./xmame-0.88/src/zlib/inftrees.c
./bacula-1.33.3-16Feb04/src/win32/zlib/inftrees.c
./abiword-2.2.3/zlib/inftrees.c
./syslinux-3.07/com32/lib/zlib/inftrees.c
./gcc-4.0.0/zlib/inftrees.c
./gcc-4.1-20050424/zlib/inftrees.c
./mysql-4.1.10a/zlib/inftrees.c
./tetex-src-3.0/libs/zlib/inftrees.c
./qt-x11-free-3.3.4/src/3rdparty/zlib/inftrees.c
./root/zip/src/inftrees.c

-- 
Alan J. Wylie                                          http://www.wylie.me.uk/
"Perfection [in design] is achieved not when there is nothing left to add,
but rather when there is nothing left to take away."
  -- Antoine de Saint-Exupery