SecurityFocus

Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) Apr 30 2003 03:39AM
Damien Miller (djm mindrot org) (2 replies)

Re: Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) Apr 30 2003 06:09PM
Valdis Kletnieks vt edu (3 replies)

On Wed, 30 Apr 2003 13:39:49 +1000, Damien Miller <djm (at) mindrot (dot) org [email concealed]> said:
> 1. Systems affected:
>
> Users of Portable OpenSSH prior to 3.6.1p2 on AIX are affected
> if OpenSSH was compiled using a non-AIX compiler (e.g. gcc).

This is the same problem as I spotted in Sendmail 8.10. Basically,
somewhere, linking is being done with "-L. -lfoo" or similar (in sendmail's
case, it was -L../otherdir type stuff).

Workaround/fix: Link with "-bnolibpath -blibpath:/usr/local/lib:/usr/lib"
or similar.
--
Valdis Kletnieks
Computer Systems Senior Engineer
Virginia Tech

[ reply ]

Re: Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) May 01 2003 11:25AM
Dan Harkless (bugtraq harkless org)

Re: Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) May 01 2003 01:48AM
Darren Tucker (dtucker zip com au)

Re: Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) Apr 30 2003 11:26PM
Damien Miller (djm mindrot org)

Re: Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) Apr 30 2003 08:29AM
Darren Tucker (dtucker zip com au)