That code might suffer from CVE-2006-2313. It should be patched to
use the proper functions from libpq before shipping it in a Debian
package.
It's true that these features only pull in the client access
libraries, but they have got dependencies of their own, so the result
could still be rather heavy-weight in some configurations.
* Ross Vandegrift:
> + --with-dlz-postgres
That code might suffer from CVE-2006-2313. It should be patched to
use the proper functions from libpq before shipping it in a Debian
package.
It's true that these features only pull in the client access
libraries, but they have got dependencies of their own, so the result
could still be rather heavy-weight in some configurations.