From owner-freebsd-security@FreeBSD.ORG Thu Oct 4 09:44:17 2007 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D28E916A419 for ; Thu, 4 Oct 2007 09:44:17 +0000 (UTC) (envelope-from vladimir.terziev@gbservices.biz) Received: from cat-btc.gbservices.biz (cat-btc.gbservices.biz [83.228.119.50]) by mx1.freebsd.org (Postfix) with ESMTP id 8206813C458 for ; Thu, 4 Oct 2007 09:44:17 +0000 (UTC) (envelope-from vladimir.terziev@gbservices.biz) Received: from cat-btc.gbservices.biz (localhost [127.0.0.1]) by localhost (Postfix) with ESMTP id 1376B1FA03F; Thu, 4 Oct 2007 11:44:16 +0200 (CEST) Received: from fs.gbs.gbdom.com (fs.gbs.gbdom.com [192.168.2.244]) by cat.gbs.gbdom.com (Postfix) with ESMTP id ED3321FA03E; Thu, 4 Oct 2007 11:44:15 +0200 (CEST) Received: from localhost (localhost.gbs.gbdom.com [127.0.0.1]) by localhost (Postfix) with ESMTP id 5E83628505; Thu, 4 Oct 2007 11:44:15 +0200 (CEST) Received: from daemon.gbs.gbdom.com (daemon.gbs.gbdom.com [192.168.2.104]) by fs.gbs.gbdom.com (Postfix) with SMTP id 144EE28504; Thu, 4 Oct 2007 11:44:15 +0200 (CEST) Date: Thu, 4 Oct 2007 12:44:15 +0300 From: Vladimir Terziev To: Dag-Erling =?ISO-8859-1?Q?Sm=F8rgrav?= Message-Id: <20071004124415.83a70f71.vlady@gbservices.biz> In-Reply-To: <86ir5nqlag.fsf@ds4.des.no> References: <200710032158.l93LwUfM089929@freefall.freebsd.org> <20071004103608.e67dd613.vlady@gbservices.biz> <86ir5nqlag.fsf@ds4.des.no> Organization: GB Services Ltd. X-Mailer: Sylpheed 2.4.4 (GTK+ 2.6.4; i386-unknown-freebsd5.4) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Virus-Scanned: ClamAV GBS-F X-Virus-Scanned: ClamAV GBS-C Cc: freebsd-security@freebsd.org Subject: Re: FreeBSD Security Advisory FreeBSD-SA-07:08.openssl X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Oct 2007 09:44:17 -0000 Dag-Erling, i have to apologize for the question. The problem was implied by me, since i put in my /etc/make.conf, MAKE_IDEA= =3Dyes. It seems, the FreeBSD 6.2-RELEASE is not built with this option set= and the original SSL libraries do not have support for IDEA in them. I have commented the option and after the re-build of patched SSL librarie= s i have all services working fine as before. Best regards, Vladimir On Thu, 04 Oct 2007 11:30:31 +0200 Dag-Erling Sm=F8rgrav wrote: > Vladimir Terziev writes: > > I have applied the patch on a FreeBSD 6.2-RELEASE system and several > > of the services (courier-imap, postfix) on the machine stopped. > > > > I got the following error: > > > > /libexec/ld-elf.so.1: /usr/lib/libssl.so.4: Undefined symbol > > "EVP_idea_cbc" >=20 > You fat-fingered the update, either by building with a different set of > options than previously, or by checking out only a partial tree. The > simplest fix is to check out a full RELENG_6_2 tree and build and > install world. >=20 > > I compared SSL libraries on the patched system with the same, but on > > unpatched system. The difference, i found, is an extra library in > > /usr/lib, on the patched system -- ``/usr/lib/libssl_p.a''. >=20 > That's a profiling version of libssl; it isn't used on a production > system and has no part in this. >=20 > DES > --=20 > Dag-Erling Sm=F8rgrav - des@des.no