[Slackbuilds-users] Cauterizing heartbleed (CVE-2014-0160)

Vincent Batts vbatts at gmail.com
Sat Apr 12 02:03:24 UTC 2014


Sorry premature send. Only those compiled with 1.0.1 (or 1.0.2). See
http://www.openssl.org/news/secadv_20140407.txt
On Apr 11, 2014 9:41 PM, "Vincent Batts" <vbatts at gmail.com> wrote:

> for file in $(find . -type f | xargs file | grep ELF | cut -d : -f 1); do
> d=$(strings $file | grep OpenSSL)
> if [ ${#d} -gt 0 ]; then
> echo $file
> echo $d
> echo
> fi
> done
> On Apr 11, 2014 5:41 PM, "B Watson" <yalhcru at gmail.com> wrote:
>
>> On 4/11/14, mancha <mancha1 at hush.com> wrote:
>> > If we're sure the linking is dynamic then re-compilation is not needed.
>>
>> Need a reliable way to tell whether a binary is statically linked with
>> openssl... grep for some symbol that's always linked I suppose.
>>
>> Would require actually building the stuff you're trying to check though,
>> not just grepping the build script.
>> _______________________________________________
>> SlackBuilds-users mailing list
>> SlackBuilds-users at slackbuilds.org
>> http://lists.slackbuilds.org/mailman/listinfo/slackbuilds-users
>> Archives - http://lists.slackbuilds.org/pipermail/slackbuilds-users/
>> FAQ - http://slackbuilds.org/faq/
>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.slackbuilds.org/pipermail/slackbuilds-users/attachments/20140411/a88b442a/attachment.html>


More information about the SlackBuilds-users mailing list