zlib compression, the exploit, and OpenSSH

[Nalin Dahyabhai]

On Wed, Mar 13, 2002 at 12:07:34PM -0800, ewheeler at kaico.com wrote:
> 3.  Does OpenSSH statically link (or can it/does it by default) to the
> zlib library -- will updating the zlib library to 1.1.4 take care of the
> situation?

I can't speak to the rest of your questions, but because the portable
tree doesn't bundle its own copy of zlib, OpenSSH links against the
version installed on the system it's being compiled on.  Usually that's
a shared library if your OS has shared libraries, but it's going to be
OS-specific.

Nalin