Date: Sun, 14 Jun 2015 20:36:31 -0300 From: "rollingbits (Lucas)" <rollingbits@gmail.com> To: freebsd-security@freebsd.org Subject: Re: FreeBSD Security Advisory FreeBSD-SA-15:10.openssl Message-ID: <557e1002.0686810a.1490.6642@mx.google.com> In-Reply-To: <557D911C.8060101@FreeBSD.org> References: <201506120743.t5C7hUdu035884@freefall.freebsd.org> <557ce708.2119ec0a.12bc.7872@mx.google.com> <557D911C.8060101@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--VbJkn9YxBvnuCH5J Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Jun 14, 2015 at 10:35:08AM -0400, Matthew Seaman wrote: > On 13/06/2015 22:28, rollingbits (Lucas) wrote: > > On Fri, Jun 12, 2015 at 07:43:30AM +0000, FreeBSD Security Advisories w= rote: > >> 1) Upgrade your vulnerable system to a supported FreeBSD stable > >> or release / security branch (releng) dated after the correction > >> date. > >=20 > > Do I need rebuild my packages too? >=20 > You need to rebuild and re-install the ports version of OpenSSL, if > you're using it. >=20 > You need to rebuild and re-install anything that is statically > linked against OpenSSL libraries (either ports or base). This is > trickier than it sounds, because you need to either look at the > source code / Makefiles for the software, or use nm(1), objdump(1) > or similar to check for symbols from OpenSSL libraries in your > statically linked binaries. Fortunately, static linking against > OpenSSL is a pretty unusual thing to do. >=20 > Having done the above, you need to restart anything that loads > OpenSSL shared libraries. That tends to be most network-aware > software, so in many cases it might be easier to just reboot. Ok, thank you. --=20 rollingbits -- rollingbits@gmail.com, rollingbits@terra.com.br lucasnm@ig.com.br, rollingbits@yahoo.com, rollingbits@globo.com Get my public GPG key in http://rollingbits.tripod.com/mykey.html --VbJkn9YxBvnuCH5J Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlV+D/EACgkQH56BwuUGQbVwegCgpTt4Y8yHIUpAEHRTDYs0+pUl eYgAoN/1YkFHCE+BIasEWGqRS2CvjI0k =zAIh -----END PGP SIGNATURE----- --VbJkn9YxBvnuCH5J--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?557e1002.0686810a.1490.6642>