Hello,

I rebuild libcurl with openssl1.0.0m in view of recent openssl security vulnerability announcement.

I linked dynamically and was surprised to see that libcurl links to two different versions of openssl: one that I specified, and another one found in the system:

/usr/local/curl72/lib> ldd libcurl.so
        linux-gate.so.1 => (0x00b43000)
        libidn.so.11 => /usr/lib/libidn.so.11 (0x00a56000)
        libldap-2.3.so.0 => /usr/lib/libldap-2.3.so.0 (0x003da000)
        librt.so.1 => /lib/librt.so.1 (0x00394000)
=> libssl.so.1.0.0 => /usr/local/ssl/lib/libssl.so.1.0.0 (0x00232000)
=> libcrypto.so.1.0.0 => /usr/local/ssl/lib/libcrypto.so.1.0.0 (0x00414000)
        libz.so.1 => /usr/lib/libz.so.1 (0x00602000)
        libdl.so.2 => /lib/libdl.so.2 (0x00ec7000)
        libc.so.6 => /lib/libc.so.6 (0x00817000)
        liblber-2.3.so.0 => /usr/lib/liblber-2.3.so.0 (0x00a1f000)
        libresolv.so.2 => /lib/libresolv.so.2 (0x00de9000)
        libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x0039e000)
    => libssl.so.6 => /lib/libssl.so.6 (0x00110000)
    => libcrypto.so.6 => /lib/libcrypto.so.6 (0x00c59000)
        libpthread.so.0 => /lib/libpthread.so.0 (0x00218000)
        /lib/ld-linux.so.2 (0x007fb000)
        libcrypt.so.1 => /lib/libcrypt.so.1 (0x00155000)
        libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x00187000)
        libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x00283000)
        libcom_err.so.2 => /lib/libcom_err.so.2 (0x001c9000)
        libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x001cc000)
        libkrb5support.so.0 => /usr/lib/libkrb5support.so.0 (0x00655000)
        libkeyutils.so.1 => /lib/libkeyutils.so.1 (0x00bda000)
        libselinux.so.1 => /lib/libselinux.so.1 (0x00686000)
        libsepol.so.1 => /lib/libsepol.so.1 (0x00316000)
/usr/local/curl72/lib>

Thank you,
Alona

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-06-12