RE: [gentoo-security] Do I need to rebuild things after upgradingssl?

[Simon Reynolds]

On Fri, 2004-03-19 at 15:39, Joel Osburn wrote:

> While "readelf -s ssh | grep -i ssl" results in:
>
>     22: 0804a8d0   175 FUNC    GLOBAL DEFAULT  UND SSLeay_version
>     56: 0804aaf0    37 FUNC    GLOBAL DEFAULT  UND
> OPENSSL_add_all_algorithm
>     83: 0804ac90    10 FUNC    GLOBAL DEFAULT  UND SSLeay
>
> So does openssh need to be recompiled whenever one recompiles openssl,
> or is there another explanation?

There is another explanation:

openssh dynamically links to libcrypto from openssl which implements the
above functions (readelf -s /usr/lib/libcrypto.so-0.9.6). Since it is a
dynamic link, it should be fine.

In the scriptlet I posted earlier, the grep searched for " SSL_" instead
of "SSL" to help weed out some of the false positives.

It looks like the 7th column of output from "readelf -s" indicates
whether or not a function is defined locally. Maybe someone more
knowledgeable than me can confirm that.

~Simon Reynolds


--
gentoo-security@g.o mailing list