4 ms·
Tests against some commonly used software that make use of libssl to load certificates from disk (or perhaps a socket in strange circumstances): php-5.4.1RC2 (
by dhx 15y ago
Tests against some commonly used software that make use of libssl to load certificates from disk (or perhaps a socket in strange circumstances):
php-5.4.1RC2 (and php-5.4.0): potentially affected (one match for d2i_PKCS12_bio)
tar -xjOf /usr/portage/distfiles/php-5.4.1RC2.tar.bz2 | grep d2i
nginx-1.1.19: probably safe (1 match for d2i_SSL_SESSION)
tar -xzOf /usr/portage/distfiles/nginx-1.1.19.tar.gz | grep d2i
postgresql-9.1.3: probably safe (no matches)
tar -xjOf /usr/portage/distfiles/postgresql-9.1.3.tar.bz2 | grep d2i
postfix-2.9.1: probably safe
(one match for X509_get_ext_d2i and d2i_SSL_SESSION each)
tar -xzOf /usr/portage/distfiles/postfix-2.9.1.tar.gz | grep d2i
dovecot-2.1.4: probably safe (3 matches for d2i_DHparams, 1 match for X509_get_ext_d2i)
tar -xzOf /usr/portage/distfiles/dovecot-2.1.4.tar.gz | grep d2i
- mhurron 15y agoIn most cases these packages should be loading libssl as a shared library. Simply updating libssl to a fixed version would solve the problem for all of those instances.