Comment 6 for bug 227344

Revision history for this message
In , Florian Weimer (fw) wrote : Re: Bug#273440: DLZ integration patch

* Ross Vandegrift:

> + --with-dlz-postgres

That code might suffer from CVE-2006-2313. It should be patched to
use the proper functions from libpq before shipping it in a Debian
package.

It's true that these features only pull in the client access
libraries, but they have got dependencies of their own, so the result
could still be rather heavy-weight in some configurations.