Script to check for packages linked whit old openssl

Huulivoide · 2010-04-11 11:56:53

This is very simple script and wont chek binaries in directories other than the basic bin sbin usr/bin and usr/sbin.
But it bight be usefull if you have lots of svn and git packages installed.

here it is:

#!/bin/bash

tmp=""
pkgs=""

for i in {,/usr}/{,s}bin/* /usr/lib/*  ; do
echo $i
tmp=`readelf -d $i | grep -P '(libssl.so.0.9.8|libcrypto.so.0.9.8)'`
        if [ "$tmp" == "" ]; then
                echo clean
        else
                pkgs=$pkgs" "`pacman -Qo $i | awk '{ print $5 }'`
                echo "Old version of ssl found adding to package list."
        fi
done
echo "Here is list of packages that have binaries that use old version of openssl"
echo $pkgs

Bugs: Does not search dirs rescursively
output list can contain duplicate entrys

Last edited by Huulivoide (2010-04-11 15:08:51)

Allan · 2010-04-11 11:58:10

You really should check /usr/lib too.

Huulivoide · 2010-04-11 12:05:10

Now checks for libraries too, itotally forgot that. but still it wont check from sub dirs, im not good enought to do it.

Pierre · 2010-04-11 12:30:47

and you should use readelf -d instead of ldd which shows deps recursively.

Mektub · 2010-04-11 14:23:56

Huulivoide,

Nice.

tmp=`readefl -d $i | grep libssl.so.0.9.8`

should be:

tmp=`readelf -d $i | grep libssl.so.0.9.8`

(readefl --> readelf)

Mektub

Pierre · 2010-04-11 14:38:24

You should also scan for libcrypto.so.0.9.8

xkero · 2010-04-11 15:58:06

My recursive one liner version

find {,/usr}/{,s}bin/ /usr/lib/ -type f -printf \~%p -exec readelf -d \{\} \; 2>/dev/null | awk '/libssl.so.0.9.8|libcrypto.so.0.9.8/{print$1}' RS="~" FS="\n"

If your as lazy as me though this isn't enough so here's one that finds the offending packages in pacman

find {,/usr}/{,s}bin/ /usr/lib/ -type f -printf \~%p -exec readelf -d \{\} \; 2>/dev/null | awk '/libssl.so.0.9.8|libcrypto.so.0.9.8/{system("pacman -Qo "$1)}' RS="~" FS="\n"

And then update them!

yaourt -Sy $(find {,/usr}/{,s}bin/ /usr/lib/ -type f -printf \~%p -exec readelf -d \{\} \; 2>/dev/null | awk '/libssl.so.0.9.8|libcrypto.so.0.9.8/{system("pacman -Qqo "$1)}' RS="~" FS="\n" | sort | uniq)

Arch Linux

#1 2010-04-11 11:56:53

Script to check for packages linked whit old openssl

#2 2010-04-11 11:58:10

Re: Script to check for packages linked whit old openssl

#3 2010-04-11 12:05:10

Re: Script to check for packages linked whit old openssl

#4 2010-04-11 12:30:47

Re: Script to check for packages linked whit old openssl

#5 2010-04-11 14:23:56

Re: Script to check for packages linked whit old openssl

#6 2010-04-11 14:38:24

Re: Script to check for packages linked whit old openssl

#7 2010-04-11 15:58:06

Re: Script to check for packages linked whit old openssl

Board footer