From owner-freebsd-ports@FreeBSD.ORG Thu Sep 7 19:42:58 2006 Return-Path: X-Original-To: ports@freebsd.org Delivered-To: freebsd-ports@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 56F9216A528 for ; Thu, 7 Sep 2006 19:42:58 +0000 (UTC) (envelope-from dominique.goncalves@gmail.com) Received: from wx-out-0506.google.com (wx-out-0506.google.com [66.249.82.232]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7B01343DAE for ; Thu, 7 Sep 2006 19:42:16 +0000 (GMT) (envelope-from dominique.goncalves@gmail.com) Received: by wx-out-0506.google.com with SMTP id i27so343314wxd for ; Thu, 07 Sep 2006 12:42:16 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=R4eex2iSkLzy3YZ5D3XzR1kB3ajHT2hAFgkYdApba7s4Vtvm/GnL2lzzAMTYXdsOFtsNrM+XEdUU2xoB+C/OlBsUrZb1npvp9yuw4BiwMFdHrUO7Bb0Vu16gNs9MNlUJ3s//MwBYZb7QvgFT4Vo1EewVmoZrXnMKNS/nBlaRmA8= Received: by 10.90.105.19 with SMTP id d19mr452065agc; Thu, 07 Sep 2006 12:42:15 -0700 (PDT) Received: by 10.90.31.3 with HTTP; Thu, 7 Sep 2006 12:42:15 -0700 (PDT) Message-ID: <7daacbbe0609071242q65d739eci3ccc69536050c1f7@mail.gmail.com> Date: Thu, 7 Sep 2006 21:42:15 +0200 From: "Dominique Goncalves" To: "Dmitry Marakasov" In-Reply-To: <20060907181108.GB90551@hades.panopticon> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <7daacbbe0609070526y30f48d41u9f2c8dd74d43823e@mail.gmail.com> <20060907181108.GB90551@hades.panopticon> Cc: ports@freebsd.org Subject: Re: Rebuild ports statically linked to libcrypto(3) X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Sep 2006 19:42:58 -0000 On 9/7/06, Dmitry Marakasov wrote: > * Dominique Goncalves (dominique.goncalves@gmail.com) wrote: > > According to Security Advisories SA-06:19 about OpenSSL, we need to > > rebuild ports which are statically linked to libcrypto(3). > > > > Is there a magic command to rebuild these ports ? > > No magic command, but this seems pretty reliable for me: > > for port in `pkg_info -oaq`; do > grep OPENSSL /usr/ports/$port/Makefile >/dev/null && > echo $port; > done > > This will list all ports that use OPENSSL, and no need to search for > executables/libs linked with libcrypto dynamically or statically. > > So you may consider this as `magic command', but I prefer to do such > updates by hand, just to be sure everything is updated: > > for port in `pkg_info -oaq`; do > grep OPENSSL /usr/ports/$port/Makefile >/dev/null && > pkg_info -qO $port; > done | xargs portupgrade -fr Ok. > Note, that this will not only rebuild packages using OPENSSL, but also > all package that depend on these. That catches double statical linking, > i.e. libfoo.a is statically linked with libcrypto, and some other port > is linked with libfoo.a statically, thus incluning openssl code. > > -- > Best regards, > Dmitry mailto:amdmi3@mail.ru > Thank you to all who answered, Regards. -- There's this old saying: "Give a man a fish, feed him for a day. Teach a man to fish, feed him for life."