I have a problem with libcrypto.so.0.9.7. When I was trying to restart my apache it said the following:

libcrypto.so.0.9.7: cannot enable executable stack as shared object requires: Bad address.

I know that the libcrypto.so.0.9.7 is in the /usr/lib/ directory.

My ssh doesnt work too:

error while loading shared libraries: libcrypto.so.0.9.7: cannot enable executable stack as shared object requires: Error 14

Any ideas??


Thanks in advance

dh233

look like there is something wrong about your SSL. Was it working before? If so, have you done something recently that could have caused this? Update or some change in config files? Be very careful with SSL, if you get rooted, it will most likely be the first thing that will broke.

In any case, I think reinstaling Open SSL package of your distro would probably fic this... but make sure the broke haven't been caused by an attack against your server.

Thanks for your suggestion but I tried to do so already but it did not work. Any other solutions???

I'm in the middle of the same problem. But I found a probable answer by googling on the Debian site. A "recent" -- by Debian standards -- update to glibc causes this. It is because the critical library requires kernel support that it doesn't check for during installation.

For Debian, the solution is a kernel from 2.4.27/"Sarge" -- the "Woody" kernels don't support whatever the library needs to do. I suppose, alternatively, you can drop back to a glibc that predates this function. But dam' near everything uses that library, so downgrading it is a seriously risky step.

Now, if someone could point out a way to have a different glibc depending on the kernel (uname -r). I mess about a lot with symlinks for different kernels, but I'm not sure I want to risk a broken glibc again -- I'm just recovering from my last fiasco.

Among others, libcrypto is used by OpenSSH, PHP (so Apache can't start) and postgres. Quite critical for a web server...

Could you please precise the solution you have fuond ? Is just compiling a newer kernel sufficient to avoid the crash ?
Could a 2.6 kernel be fit ?

Thx !!

do following:
apt-get install prelink

execstack -c /usr/lib/libcrypto.so.0.9.7

and execstack -c every library you get error about stack with. everything should work ok.