Re: [cobalt-users] Re: is this what we've been discussing - CERT Advisory CA-2002-27 Apache/mod_ssl Worm

["Dave Thurman (Mailing List Email)" <listonly@xxxxxxxxxxxxxxxxxxxx>]

on 9/15/02 5:09 PM, E.B. Dreger stated:

> DT> Date: Sun, 15 Sep 2002 16:44:44 -0500
> DT> From: Dave Thurman
> 
> 
> DT> > /usr/local/ssl/lib/libssl.a
> DT> Isn't that badboy from the non-cobalt install??
> 
> No.  The .a extension indicates an ar-created archive that gets
> linked into an executable.  Compare with a .so dynamic module.
> 
> You can delete .a files and run a system just fine, although
> compiling will be a problem.  Not so with .so files; delete those
> and dynamically-linked binaries are hosed.
> 
> Note that the above paragraph gives some hints as to the
> mechanism by which upgrades must be applied.
> 
> 
I meant the badboy as my attempt at humor:)

So what does a person do to write to the proper ssl to upgrade. I see what
you are I think saying about a possible overwrite messing with the depends'
-- 
Thanks!!
Dave Thurman
The Web Presence Group / www.webpresencegroup.net
Listonly <at> webpresencegroup.net / Spam Block 8^Q