Gentoo Archives: gentoo-security

From: Troy Farrell <troy@×××××××××××.com>
To: phil@×××××.us
Cc: gentoo-security@l.g.o, pcryer@×××××××××.com
Subject: Re: [gentoo-security] Re: [gentoo-announce] Gentoo Linux Security Advisory 200403-03: Multiple OpenSSL Vulnerabilities
Date: Thu, 18 Mar 2004 05:03:13
Message-Id: 40592D0F.3040307@entheossoft.com
In Reply to: [gentoo-security] Re: [gentoo-announce] Gentoo Linux Security Advisory 200403-03: Multiple OpenSSL Vulnerabilities by Phil Cryer
1 Phil, I see one problem though I'm not sure I have the solution.
2
3 The 'emerge sync' error is a python traceback. A temporary fix (enough to get
4 it working long enough to fix it) might be to soft link your libssl.so.0.9.7 to
5 libssl.so.0.9.6. You need to re-emerge python because of the +ssl USE flag. I
6 can't say what the 'CANNOT IMPORT FTPLIB' error means.
7
8 Troy
9
10 --
11 And the glory of the LORD shall be revealed, and all flesh shall see it
12 together: for the mouth of the LORD hath spoken it.
13 Isaiah 40.5
14
15 Phil Cryer wrote:
16 > I issued the following:
17 >
18 > # emerge sync
19 > # emerge -pv ">=dev-libs/openssl-0.9.7d"
20 > # emerge ">=dev-libs/openssl-0.9.7d"
21 >
22 > and everything went fine. But now:
23 >
24 > root@hector cryer # etc-update
25 > !!! CANNOT IMPORT FTPLIB: libssl.so.0.9.6: cannot open shared object file:
26 > No such file or directory
27 > !!! CANNOT IMPORT FTPLIB: libssl.so.0.9.6: cannot open shared object file:
28 > No such file or directory
29 > Scanning Configuration files...
30 > Exiting: Nothing left to do; exiting. :)
31 >
32 > and:
33 >
34 > root@hector cryer # emerge sync
35 > Traceback (most recent call last):
36 > File "/usr/bin/emerge", line 10, in ?
37 > import
38 > emergehelp,xpak,string,re,commands,time,shutil,traceback,atexit,signal,socket,types
39 > File "/usr/lib/python2.2/socket.py", line 41, in ?
40 > from _socket import *
41 > ImportError: libssl.so.0.9.6: cannot open shared object file: No such file
42 > or directory
43 >
44 > Unfortunately I had too much time on my hands and did this on my
45 > workstation and server tonight; breaking OpenSSL (plus things like emerge)
46 > on both. What can I do now?
47 >
48 > P
49
50 --
51 gentoo-security@g.o mailing list

Replies