Re: FreeBSD Security Advisory FreeBSD-SA-03:18.openssl

From: Lupe Christoph (lupe_at_lupe-christoph.de)
Date: 10/05/03

  • Next message: D J Hawkey Jr: "Re: FreeBSD Security Advisory FreeBSD-SA-03:18.openssl" 
    Date: Sun, 5 Oct 2003 09:50:28 +0200
To: freebsd-security@freebsd.org

    On Saturday, 2003-10-04 at 02:33:31 +0100, Colin Percival wrote:
    > At 00:06 04/10/2003 +0000, Bjoern A. Zeeb wrote:
    > >On Fri, 3 Oct 2003, FreeBSD Security Advisories wrote:
    > >> c) Recompile the operating system as described in
    > >> <URL:
    > >http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html >.

    > >wouldn't it be
    > >possible to recompile libssl/libcrypto and install only them instead of
    > >rebuilding the complete base system as suggested

    > Just to confirm the contents of my earlier email: The only binaries
    > affected by this in RELENG_4_7 are /usr/lib/lib(ssl|crypto)(.a|.so.2|_p.a)
    > -- so rebuilding those two libraries (and any statically linked ports
    > software) should be enough.

    I see that the advisory is still not linked from the website. Given the
    hassle involve with building and installing world, wouldn't it be a good
    isdea to cut down on the installation and advise to rebuild the
    libraries, possibly any ports statically linking them, and restart
    either all affected processes or the system?

    Lupe Christoph 

    -- 
| lupe@lupe-christoph.de       |           http://www.lupe-christoph.de/ |
| "Violence is the resort of the violent" Lu Tze                         |
| "Thief of Time", Terry Pratchett                                       |
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
  • Next message: D J Hawkey Jr: "Re: FreeBSD Security Advisory FreeBSD-SA-03:18.openssl"

    Relevant Pages

    • Re: determining whats in the base system
      ... installing the FreeBSD base system on a computer and checking whether the ... For the first question, I'd first look at where the utility is. ... if your ports database is correct. ...
      (freebsd-questions)
    • Re: Should I give up on FreeBSD?
      ... Install a base system and make sure it boots correctly. ... Yes, installing packages right away is tempting, but you do run the risk ... Once you have a working base system, you can go back to the installer ...
      (comp.unix.bsd.freebsd.misc)
    • Re: newbie question
      ... Please read Chapter 4 of the Handbook about installing third-party apps using ... Then read §3.9 about shells, ... All non-critical parts of the base system ... Any third-party applications you install using the ports or packages system ...
      (comp.unix.bsd.freebsd.misc)
    • Re: determining whats in the base system
      ... installing the FreeBSD base system on a computer and checking whether the ... For the first question, I'd first look at where the utility is. ... The "pkg_info" utility and all of its switches and options could be useful too, if your ports database is correct. ...
      (freebsd-questions)
    • Re: Upgrade mobo without reinstalling all programs?
      ... For me that would involve installing WinXP Pro/SP2, then installing SP3, then installing latest Mother board drivers so I can get online. ... In the past the most horrifying part of a total re-install was re-installing THE SIMS and all the expansion packs, then rebuilding my neighborhoods from backups. ... That alone would take a whole weekend LOL. ...
      (alt.comp.hardware.pc-homebuilt)