Gentoo Archives: gentoo-security

From: Calum <gentoo-security@××××××××××××.uk>
To: gentoo-security@l.g.o
Subject: Re: [gentoo-security] Re: [gentoo-announce] Gentoo Linux Security Advisory 200403-03: Multiple OpenSSL Vulnerabilities
Date: Thu, 18 Mar 2004 10:41:13
Message-Id: 200403181041.03644.gentoo-security@umtstrial.co.uk
In Reply to: Re: [gentoo-security] Re: [gentoo-announce] Gentoo Linux Security Advisory 200403-03: Multiple OpenSSL Vulnerabilities by Troy Farrell
1 On Thursday 18 March 2004 05:01, Troy Farrell wrote:
2 > Phil, I see one problem though I'm not sure I have the solution.
3 >
4 > The 'emerge sync' error is a python traceback. A temporary fix (enough to
5 > get it working long enough to fix it) might be to soft link your
6 > libssl.so.0.9.7 to libssl.so.0.9.6. You need to re-emerge python because
7 > of the +ssl USE flag. I can't say what the 'CANNOT IMPORT FTPLIB' error
8 > means.
9
10 I had this same problem recently, but I did it in a much more stupid way. I'm
11 not going to tell you all on here what it was though.
12
13 Suffice it to say that I had to copy lib files from another machine to get it
14 working. And because it was the SSL libs that were not working, SCP wasn't my
15 friend. It was a pain.
16 Why is emerge dynamically linked to the ssl libs anyway? Why does it need ssl
17 libs anyway? Why isn't the static use flag hardcoded into the portage ebuild?
18
19 I've often wondered with Gentoo how you would recover if you mashed up your
20 glibc, gcc, or similar. With a package based distro, you could just mount and
21 install the same package again, but it's a little more tricky in Gentoo.
22
23 > Troy
24
25 --
26
27 The early bird may get the worm, but the second mouse gets the cheese.
28
29 jabber: jcalum@××××××××××××.uk
30 pgp: http://gk.umtstrial.co.uk/~calum/keys.php
31
32 --
33 gentoo-security@g.o mailing list

Replies