Re: [SECURITY] [DSA 3500-1] openssl security update

From	Carsten Aulbert <Carsten.Aulbert@aei.mpg.de>
Newsgroups	linux.debian.security
Subject	Re: [SECURITY] [DSA 3500-1] openssl security update
Date	2016-03-02 09:20 +0100
Message-ID	<r8aaK-4WW-13@gated-at.bofh.it> (permalink)
References	<r7TCV-1Ub-9@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Hi

brief question for a possible addendum. I believe one should at least
restart services which are currently using openssl after patching it,
right, e.g. trying to figure out by lsof -n | grep openssl.

(or reboot the machine)

Would it make sense to add that to the DSA 3500-1 page, like for
DSA-3481[1]?

Cheers

Carsten

[1] "While it is only necessary to ensure that all processes are not
using the old glibc anymore, it is recommended to reboot the machines
after applying the security upgrade."



-- 
Dr. Carsten Aulbert, Atlas cluster administration
Max Planck Institute for Gravitational Physics (Albert Einstein Institute)
Callinstraße 38, 30167 Hannover, Germany
Tel: +49 511 762 17185, Fax: +49 511 762 17193

Back to linux.debian.security | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Re: [SECURITY] [DSA 3500-1] openssl security update Carsten Aulbert <Carsten.Aulbert@aei.mpg.de> - 2016-03-02 09:20 +0100
  Re: [SECURITY] [DSA 3500-1] openssl security update Peter Ludikovsky <peter@ludikovsky.name> - 2016-03-02 09:40 +0100
  Re: [SECURITY] [DSA 3500-1] openssl security update Florent Rougon <f.rougon@free.fr> - 2016-03-02 09:40 +0100
  Re: [SECURITY] [DSA 3500-1] openssl security update Paul Wise <pabs@debian.org> - 2016-03-02 09:40 +0100
    Re: [SECURITY] [DSA 3500-1] openssl security update Paul Wise <pabs@debian.org> - 2016-03-02 09:50 +0100
    Re: [SECURITY] [DSA 3500-1] openssl security update Carsten Aulbert <Carsten.Aulbert@aei.mpg.de> - 2016-03-02 09:50 +0100

csiph-web