LFS 6.5, 6.7, 6.8, 7.0 (actually SVN-20111210). Installed: linux-3.2.2, gnutls-3.0.12 and nettle-2.4.
>From http://curl.haxx.se/docs/adv_20120124.html and from >http://curl.haxx.se/docs/adv_20120124B.html: "2. AFFECTED VERSIONS Only curl and libcurl builds that use OpenSSL are affected. Affected versions: curl 7.10.6 to and including 7.23.1 Not affected versions: curl < 7.10.6 and >= 7.24.0" >From the homepage at http://curl.haxx.se/: "Note especially that 7.24.0 fixes two separate security vulnerabilities: data injection attack for certain protocols and SSL CBC IV vulnerability when built to use OpenSSL" As I did for curl-7.23.1, I tried to install using (but "make" failed): "--without-ssl --with-gnutls: To build with GnuTLS support instead of OpenSSL for SSL/TLS." Tail of "make" log: "libtool: link: gcc -g0 -O2 -Wno-system-headers -o .libs/curl hugehelp.o tool_binmode.o tool_bname.o tool_cb_dbg.o tool_cb_hdr.o tool_cb_prg.o tool_cb_rea.o tool_cb_see.o tool_cb_skt.o tool_cb_wrt.o tool_cfgable.o tool_convert.o tool_dirhie.o tool_doswin.o tool_easysrc.o tool_formparse.o tool_getparam.o tool_getpass.o tool_help.o tool_helpers.o tool_homedir.o tool_libinfo.o tool_main.o tool_mfiles.o tool_msgs.o tool_operate.o tool_operhlp.o tool_panykey.o tool_paramhlp.o tool_parsecfg.o tool_setopt.o tool_sleep.o tool_urlglob.o tool_util.o tool_vms.o tool_writeenv.o tool_writeout.o tool_xattr.o strtoofft.o strdup.o rawstr.o nonblock.o ../lib/.libs/libcurl.so -lrt -lz ../lib/.libs/libcurl.so: undefined reference to `nettle_md5_digest' ../lib/.libs/libcurl.so: undefined reference to `nettle_des_encrypt' ../lib/.libs/libcurl.so: undefined reference to `nettle_des_set_key' ../lib/.libs/libcurl.so: undefined reference to `nettle_md5_init' ../lib/.libs/libcurl.so: undefined reference to `nettle_md5_update' ../lib/.libs/libcurl.so: undefined reference to `nettle_md4_digest' ../lib/.libs/libcurl.so: undefined reference to `nettle_md4_update' ../lib/.libs/libcurl.so: undefined reference to `nettle_md4_init' collect2: ld returned 1 exit status make[2]: ** [curl] Erro 1 make[2]: Saindo do diretório `/media/dados/home/fernando/tmp/paco-build-2012.02.01/curl-7.24.0/src' make[1]: ** [all] Erro 2 make[1]: Saindo do diretório `/media/dados/home/fernando/tmp/paco-build-2012.02.01/curl-7.24.0/src' make: ** [all-recursive] Erro 1" It builds correctly with ssl (i.e., omiting the switches referred above). Please, help would be much appreciated. []s, Fernando -- http://linuxfromscratch.org/mailman/listinfo/blfs-support FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the above information page
