Changeset 0e7a9e9 for postlfs/security/openssl10.xml

Timestamp:

11/03/2017 07:27:23 PM (6 years ago)

Author:

Ken Moffat <ken@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

e46947f

Parents:

63d9d4f

Message:

openssl-1.1.0g and 1.0.2m

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@19428 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:

• postlfs/security/openssl10.xml (modified) (3 diffs)

postlfs/security/openssl10.xml

@@ -9 +9 @@
   <!ENTITY openssl10-download-ftp
            "ftp://openssl.org/source/openssl-&openssl10-version;.tar.gz">
-  <!ENTITY openssl10-md5sum        "f85123cd390e864dfbe517e7616e6566">
+  <!ENTITY openssl10-md5sum        "10e9e37f492094b9ef296f68f24a7666">
   <!ENTITY openssl10-size          "5.2 MB">
-  <!ENTITY openssl10-buildsize     "58 MB (with tests)">
-  <!ENTITY openssl10-time          "1.6 SBU (with tests)">
+  <!ENTITY openssl10-buildsize     "72 MB (with tests)">
+  <!ENTITY openssl10-time          "1.1 SBU (with tests)">
 ]>
 
@@ -134 +134 @@
 <screen role="root"><userinput>make INSTALL_PREFIX=$PWD/Dest install_sw                      &amp;&amp;
 
+rm -rf /usr/lib/openssl-1.0                                   &amp;&amp;
 install -vdm755                   /usr/lib/openssl-1.0        &amp;&amp;
 cp -Rv Dest/usr/lib/openssl-1.0/* /usr/lib/openssl-1.0        &amp;&amp;
@@ -160 +161 @@
       compression/decompression functionality using the
       <filename class="libraryfile">libz</filename> library.
+    </para>
+
+    <para>
+      <parameter>rm -rf /usr/lib/openssl-1.0</parameter>: This will do
+      nothing on a first install, but enables a later update. During the
+      install the libraries are moved and replaced by symlinks. If you later
+      upgrade to a future release of <application>openssl-1.0.2</application>
+      to fix newly discovered vulnerabilities, without this command the move
+      would fail because the symlinks mean the source and destination files
+      are identical.
     </para>