From owner-freebsd-questions@FreeBSD.ORG  Mon Jan 31 14:43:43 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 287E516A4CE
	for <freebsd-questions@freebsd.org>;
	Mon, 31 Jan 2005 14:43:43 +0000 (GMT)
Received: from spatula.dreamhost.com (spatula.dreamhost.com [66.33.205.9])
	by mx1.FreeBSD.org (Postfix) with ESMTP id E3ABD43D3F
	for <freebsd-questions@freebsd.org>;
	Mon, 31 Jan 2005 14:43:42 +0000 (GMT)
	(envelope-from lists@tntluoma.com)
Received: from [192.168.1.2] (adsl-68-252-33-50.dsl.wotnoh.ameritech.net
	[68.252.33.50])	by spatula.dreamhost.com (Postfix) with ESMTP
	id AC8FD17D015; Mon, 31 Jan 2005 06:43:37 -0800 (PST)
In-Reply-To: <LOBBIFDAGNMAMLGJJCKNCEDDFAAA.tedm@toybox.placo.com>
References: <LOBBIFDAGNMAMLGJJCKNCEDDFAAA.tedm@toybox.placo.com>
Mime-Version: 1.0 (Apple Message framework v619.2)
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <33519d03ce5878bc87695b27bcae3388@tntluoma.com>
Content-Transfer-Encoding: 7bit
From: Timothy Luoma <lists@tntluoma.com>
Date: Mon, 31 Jan 2005 09:43:39 -0500
To: "Ted Mittelstaedt" <tedm@toybox.placo.com>
X-Mailer: Apple Mail (2.619.2)
cc: FreeBSD Mailing List <freebsd-questions@freebsd.org>
Subject: Re: rsync statically linked to zlib 1.1.4?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 31 Jan 2005 14:43:43 -0000


On Jan 31, 2005, at 4:45 AM, Ted Mittelstaedt wrote:

> it's either statically linked or it's using the 1.1.4 shared library.
>
> 1.1.4 is not vulnerable, only 1.2.0, 1.2.1 are.  You can leave it be.
>
> the other programs are linked to the shared lib, and when you updated 
> the libz.so file those got updated.

Ah, ok.  Thanks.  Good to know.

TjL