Gentoo Archives: gentoo-security

From: Piotr Kalinowski <pitkali@××.pl>
To: gentoo-security@l.g.o
Subject: Re: [gentoo-security] Re: [gentoo-announce] Gentoo Linux Security Advisory 200403-03: Multiple OpenSSL Vulnerabilities
Date: Thu, 18 Mar 2004 05:39:23
Message-Id: 200403180639.24774.pitkali@o2.pl
In Reply to: [gentoo-security] Re: [gentoo-announce] Gentoo Linux Security Advisory 200403-03: Multiple OpenSSL Vulnerabilities by Jeremy Huddleston
1 Dnia czw 18. marca 2004 06:32, Jeremy Huddleston napisa³:
2 > The 0.9.7 ebuilds should install 0.9.6 if it's on your system when the
3 > ebuild runs? Are you using grp? Perhaps the binaries don't include
4 > 0.9.6, but my install did:
5 >
6 >
7 > $ qpkg -I -v openssl
8 > qpkdev-libs/openssl-0.9.7d *
9 >
10 > $ qpkg -l openssl | grep lib
11 > <snip>
12 > /usr/lib/libssl.so.0.9.6
13 > /usr/lib/libssl.so.0.9.7
14 > /usr/lib/libssl.so -> libssl.so.0 1079583999
15 > /usr/lib/libcrypto.so -> libcrypto.so.0 1079583999
16 > /usr/lib/pkgconfig
17 > /usr/lib/pkgconfig/openssl.pc
18 > /usr/lib/libssl.so.0 -> libssl.so.0.9.7 1079583999
19 > /usr/lib/libcrypto.so.0.9.6
20 > /usr/lib/libcrypto.so.0.9.7
21 > /usr/lib/libcrypto.so.0 -> libcrypto.so.0.9.7 1079583999
22 > /usr/lib/libcrypto.a
23 > /usr/lib/libssl.a
24 > <snip>
25
26 My didn't. I haven't, however, updated it to 0.9.7d yet.
27
28 Regards,
29 Piotr Kalinowski
30
31 --
32 * Registered Linux User no. 282090 * GG: 1482763 *
33 * JID:kali@××××××.pl * Tlen:pitkali@××××.pl *
34
35 --
36 gentoo-security@g.o mailing list

Replies