Re: FreeBSD Security Advisory FreeBSD-SA-14:14.openssl

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 6/5/14, 7:14 AM, Karl Pielorz wrote:
> 
> 
> --On 05 June 2014 13:16 +0000 FreeBSD Security Advisories 
> <security-advisories@freebsd.org> wrote:
> 
>> # cd /usr/src # patch < /path/to/patch
>> 
>> c) Recompile the operating system using buildworld and
>> installworld as described in
>> <URL:http://www.FreeBSD.org/handbook/makeworld.html>.
> 
> Hi,
> 
> Is it necessary to build/install the entire world if you're more 
> concerned with protecting specific applications using the OpenSSL 
> library? - e.g. if the machine is just running Apache?

We recommend recompiling the entire world because it's less likely to
miss something.

> How would you just recompile / install openssl in the base on it's
> own?

You can do openssl only build as long as you know what you are doing.

> Is there anything in FreeBSD that statically links against openssl
> anyway?

For this one advisory, no, no statically linked binaries are affected.

-----BEGIN PGP SIGNATURE-----
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=jTd5
-----END PGP SIGNATURE-----
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"