Re: [HEADSUP] OpenSSL updated to 1.0.2d

On Sat, 31 Oct 2015 09:23:06 -0500
Eric van Gyzen <eric_at_vangyzen.net> wrote:

> On 10/31/15 5:25 AM, O. Hartmann wrote:
> > Am Fri, 30 Oct 2015 16:57:45 -0400
> > Jung-uk Kim <jkim_at_FreeBSD.org> schrieb:
> >  
> >> -----BEGIN PGP SIGNED MESSAGE-----
> >> Hash: SHA256
> >>
> >> OpenSSL on head has been updated to 1.0.2d.  Please make sure to
> >> recompile all binaries depending on libcrypto.so.7 or libssl.so.7.  
> >
> > That is good news.
> >
> > Could you provide, please, some hints how one could check all installed
> > ports for the usage of those specific libraries? Or could you provide a
> > hint towards an existing port already providing those tools? It would be
> > great for those "from the set of ordinary people" using FreeBSD.
> >
> > I ask for that because I recall that there were a couple of ports which
> > explicitely asks for a selection of what SSL lib should be used and in my
> > case, I use the base system's one.  
> 
> I expect there's a port, but I'm not aware of one.
> 
> This should work:
> 
> find /usr/local/*bin /usr/local/lib* -type f | \
> while read F; do \
> 	objdump -x $F 2>&1 | grep -Eq 'NEEDED  *lib(crypto|ssl).so.7' && \
> 		echo $F; \
> done
> 
> This is in /bin/sh (or bash).  You could change "echo" to "pkg which"
> to show the package names.
> 
> Cheers,
> 
> Eric

Thank you very much.

For a "simple headless server" the update is much more convenient than for
systems with a graphical user's interface like X11, so having such a script at
hand via "UPDATING" other than a simple Email would be great.

Kind regards and thank you,

oh