Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 04 Oct 2007 11:30:31 +0200
From:      =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no>
To:        Vladimir Terziev <vlady@gbservices.biz>
Cc:        freebsd-security@freebsd.org
Subject:   Re: FreeBSD Security Advisory FreeBSD-SA-07:08.openssl
Message-ID:  <86ir5nqlag.fsf@ds4.des.no>
In-Reply-To: <20071004103608.e67dd613.vlady@gbservices.biz> (Vladimir Terziev's message of "Thu\, 4 Oct 2007 10\:36\:08 %2B0300")
References:  <200710032158.l93LwUfM089929@freefall.freebsd.org> <20071004103608.e67dd613.vlady@gbservices.biz>

next in thread | previous in thread | raw e-mail | index | archive | help
Vladimir Terziev <vlady@gbservices.biz> writes:
> I have applied the patch on a FreeBSD 6.2-RELEASE system and several
> of the services (courier-imap, postfix) on the machine stopped.
>
> I got the following error:
>
> /libexec/ld-elf.so.1: /usr/lib/libssl.so.4: Undefined symbol
> "EVP_idea_cbc"

You fat-fingered the update, either by building with a different set of
options than previously, or by checking out only a partial tree.  The
simplest fix is to check out a full RELENG_6_2 tree and build and
install world.

> I compared SSL libraries on the patched system with the same, but on
> unpatched system. The difference, i found, is an extra library in
> /usr/lib, on the patched system -- ``/usr/lib/libssl_p.a''.

That's a profiling version of libssl; it isn't used on a production
system and has no part in this.

DES
--=20
Dag-Erling Sm=C3=B8rgrav - des@des.no



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86ir5nqlag.fsf>