Re: libz patch?

[Otto Moerbeek <otto@drijf.net>]

On Tue, 31 Aug 2004, patrick ~ wrote:

> Greetings,
> 
> Just curious, I noticed the recent security
> announcement about libz patch:
> 
> ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/017_libz.patch
> 
> 
> The instructions say to do the following after
> applying the patch: ( cd /usr/src/lib/libz && make obj
> depend && make && make install )
> 
> 
> This will (i imagine) build the libz.{a,so} and
> install them along with the header file(s) on the
> system.
> 
> But what about any other binaries/programs already
> built and linked (statically) with the faulty libz.a
> (read: libz prior to this patch)?

There are no programs in base  that are statically linked to 
libz.

	-Otto

> 
> Is there a list maintained to indicate which
> system-installed binaries also need to be re-built
> after such a patch?  Or are all system-installed
> binaries linked dynamically to libz?
> 
> I'd guess that there is no such list but I thought I'd
> ask anyway :-)
> 
> --patrick
> Tired of spam?  Yahoo! Mail has the best spam protection around 
> http://mail.yahoo.com