Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 7 Sep 2006 21:42:15 +0200
From:      "Dominique Goncalves" <dominique.goncalves@gmail.com>
To:        "Dmitry Marakasov" <amdmi3@mail.ru>
Cc:        ports@freebsd.org
Subject:   Re: Rebuild ports statically linked to libcrypto(3)
Message-ID:  <7daacbbe0609071242q65d739eci3ccc69536050c1f7@mail.gmail.com>
In-Reply-To: <20060907181108.GB90551@hades.panopticon>
References:  <7daacbbe0609070526y30f48d41u9f2c8dd74d43823e@mail.gmail.com> <20060907181108.GB90551@hades.panopticon>

next in thread | previous in thread | raw e-mail | index | archive | help
On 9/7/06, Dmitry Marakasov <amdmi3@mail.ru> wrote:
> * Dominique Goncalves (dominique.goncalves@gmail.com) wrote:
> > According to Security Advisories SA-06:19 about OpenSSL, we need to
> > rebuild ports which are statically linked to libcrypto(3).
> >
> > Is there a magic command to rebuild these ports ?
>
> No magic command, but this seems pretty reliable for me:
>
> for port in `pkg_info -oaq`; do
>         grep OPENSSL /usr/ports/$port/Makefile >/dev/null &&
>                 echo $port;
> done
>
> This will list all ports that use OPENSSL, and no need to search for
> executables/libs linked with libcrypto dynamically or statically.
>
> So you may consider this as `magic command', but I prefer to do such
> updates by hand, just to be sure everything is updated:
>
> for port in `pkg_info -oaq`; do
>         grep OPENSSL /usr/ports/$port/Makefile >/dev/null &&
>                 pkg_info -qO $port;
> done | xargs portupgrade -fr

Ok.

> Note, that this will not only rebuild packages using OPENSSL, but also
> all package that depend on these. That catches double statical linking,
> i.e. libfoo.a is statically linked with libcrypto, and some other port
> is linked with libfoo.a statically, thus incluning openssl code.
>
> --
> Best regards,
>  Dmitry                          mailto:amdmi3@mail.ru
>

Thank you to all who answered,
Regards.

-- 
There's this old saying: "Give a man a fish, feed him for a day. Teach
a man to fish, feed him for life."



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?7daacbbe0609071242q65d739eci3ccc69536050c1f7>