Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 05 Dec 2009 22:02:23 +0000
From:      Michal <ml@infosec.pl>
To:        freebsd-security@freebsd.org
Subject:   Re: FreeBSD Security Advisory FreeBSD-SA-09:15.ssl
Message-ID:  <4B1AD86F.8090907@infosec.pl>
In-Reply-To: <200912030930.nB39UdMK037494@freefall.freebsd.org>
References:  <200912030930.nB39UdMK037494@freefall.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
FreeBSD Security Advisories wrote:
> b) Execute the following commands as root:
> 
> # cd /usr/src
> # patch < /path/to/patch
> # cd /usr/src/secure/lib/libcrypto
> # make obj && make depend && make includes && make && make install
> 
> NOTE: On the amd64 platform, the above procedure will not update the
> lib32 (i386 compatibility) libraries.  On amd64 systems where the i386
> compatibility libraries are used, the operating system should instead
> be recompiled as described in
> <URL:http://www.FreeBSD.org/handbook/makeworld.html>;
> 

Don't quite understand - do we really have to rebuild and reinstall 
whole world on amd64 just to update these libraries?
Rebuilding is not a problem here but reinstalling can be painful because 
of host-based IDS, custom chflags and so on. Looks like a terrible waste 
of resources.
Is there a way to reinstall just these libraries or to get them from the 
net in a secure manner i.e. signed?

Cheers.
Michal
-- 
"Lost time is never found again." -Benjamin Franklin



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4B1AD86F.8090907>