NetBSD-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

lib/57603: openssl shlib major bump requires major bump of all dependent libraries too



>Number:         57603
>Category:       lib
>Synopsis:       openssl shlib major bump requires major bump of all dependent libraries too
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    lib-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Sep 04 10:00:00 +0000 2023
>Originator:     Taylor R Campbell
>Release:        netbsd-10
>Organization:
The NetBSD Versiondation
>Environment:
>Description:
I built curl on netbsd-9, so /usr/pkg/bin/curl is linked against, among other things:

- libcrypto.so.14
- libgssapi.so.11

In netbsd-9, libgssapi.so.11 is linked against libcrypto.so.14, so this worked.

But in netbsd-10, libgssapi.so.11 is linked against libcrypto.so.15.  So /usr/pkg/bin/curl now brings two copies of libcrypto.so into the address space, which will lead to no good.
>How-To-Repeat:
1. install netbsd-9
2. build and install packages
3. upgrade to netbsd-10
>Fix:
1. Find all the packages that link against libcrypto.so or libssl.so.
2. Bump their majors
3. Repeat the process for the libraries whose majors got bumped.
4. Invent a way to do this automatically.



Home | Main Index | Thread Index | Old Index