Re: Zlib vulnerability heads-up.

Jan Wieck <janwieck(at)yahoo(dot)com> writes:

> Lamar Owen wrote:
> > On Tuesday 12 March 2002 11:34 am, Jan Wieck wrote:
> > > Lamar Owen wrote:
> > > [Charset iso-8859-15 unsupported, filtering to ASCII...]
> > > > As PostgreSQL uses the zlib library (for TOAST?), this is a headsup that
> > > > a bug has been found in the zlib library that could cause data
> > > > corruption or a security breach.
> >
> > > PostgreSQL does not use the zlib library for toast. The
> > > algorithm used in toast is based on Adisak Pochanayon's SLZ.
> >
> > Good. I think.
> >
> > But what _does_ use zlib in PostgreSQL?
>
> On a quick search I can only see pg_backup using it.

I see many more, including the postmaster:

[teg(at)halden teg]$ ldd /usr/bin/postmaster
libssl.so.2 => /lib/libssl.so.2 (0x4002e000)
libcrypto.so.2 => /lib/libcrypto.so.2 (0x4005c000)
libkrb5.so.3 => /usr/kerberos/lib/libkrb5.so.3 (0x4011f000)
libk5crypto.so.3 => /usr/kerberos/lib/libk5crypto.so.3 (0x40176000)
libcom_err.so.3 => /usr/kerberos/lib/libcom_err.so.3 (0x40186000)
libz.so.1 => /usr/lib/libz.so.1 (0x40188000)
libcrypt.so.1 => /lib/libcrypt.so.1 (0x40196000)
libresolv.so.2 => /lib/libresolv.so.2 (0x401c4000)
libnsl.so.1 => /lib/libnsl.so.1 (0x401d5000)
libdl.so.2 => /lib/libdl.so.2 (0x401ea000)
libm.so.6 => /lib/i686/libm.so.6 (0x401ed000)
libreadline.so.4 => /usr/lib/libreadline.so.4 (0x4020f000)
libtermcap.so.2 => /lib/libtermcap.so.2 (0x40235000)
libc.so.6 => /lib/i686/libc.so.6 (0x4023a000)
/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)
[teg(at)halden teg]$

--
Trond Eivind Glomsrød
Red Hat, Inc.