OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Martin Köhling (mk_at_lw1.cc-computer.de)
Date: Wed Jul 31 2002 - 04:41:48 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi!

    On Tue, 30 Jul 2002, Roman Drahtmueller wrote:

    > SPECIAL INSTALL INSTRUCTIONS:
    > ==============================
    > After performing the package update, all services using the openssl
    > libraries must be restarted for the update to become effective.
    > This can be done by rebooting the server or by individually restarting
    > the services in question manually. To find out which services use the
    > openssl libraries, use the command
    >
    > fuser -v /usr/lib/libssl.so* /usr/lib/libcrypto.so*

    I just noticed that this line will only show correct results *before* the
    upgrade - which makes sense: the old libs have been replaced during the
    upgrade, but running processes still use the *old* (deleted) libs - so
    the fuser command can't report them.

    Perhaps the next advisory should mention this problem...

    As a workaround, after the upgrade one can use something like:

       lsof | grep "/usr/lib/libssl.so*\|/usr/lib/libcrypto.so*"

    which results in something like:

        pine 14262 mk mem DEL 3,7 192668 /usr/lib/libssl.so.0.9.6-RPMDELETE
        ...

    Cheers,
    Martin

    -- 
    To unsubscribe, e-mail: suse-security-unsubscribesuse.com
    For additional commands, e-mail: suse-security-helpsuse.com
    Security-related bug reports go to securitysuse.de, not here