crypt_blowfish (http://www.openwall.com/crypt/ http://www.openwall.com/crypt/) is a 3rd party crypt() interface for non-openbsd systems that uses bcrypt. this

crypt_blowfish (http://www.openwall.com/crypt/ http://www.openwall.com/crypt/) is a 3rd party crypt() interface for non-openbsd systems that uses bcrypt. this problem doesn't affect openbsd. according to another post (http://seclists.org/oss-sec/2011/q2/653 http://seclists.org/oss-sec/2011/q2/653) postgresql and php-suhosin use the same crypt_blowfish code, but may or may not be affected.