Changeset e04bf44


Ignore:
Timestamp:
05/15/2021 06:05:40 AM (3 years ago)
Author:
Thomas Trepl <thomas@…>
Branches:
ml-11.0, multilib
Children:
f34f267
Parents:
d4b5218 (diff), 6df63e4 (diff)
Note: this is a merge changeset, the changes displayed below correspond to the merge itself.
Use the (diff) links above to see all the changes relative to each parent.
Message:

Merge

Files:
2 edited

Legend:

Unmodified
Added
Removed

  • chapter01/changelog.xml

    rd4b5218 re04bf44  
    4545    appropriate for the entry or if needed the entire day's listitem.
    4646    -->
     47    <listitem>
     48      <para>2021-05-14</para>
     49      <itemizedlist>
     50        <listitem>
     51          <para>[ken] - Add a Note about upgrading in OpenSSL.</para>
     52        </listitem>
     53      </itemizedlist>
     54    </listitem>
    4755
    4856    <listitem>

  • chapter08/openssl.xml

    rd4b5218 re04bf44  
    7777
    7878<screen><userinput remap="install">cp -vfr doc/* /usr/share/doc/openssl-&openssl-version;</userinput></screen>
     79
     80    <note>
     81      <para>
     82        You should update OpenSSL when a new version which fixes vulnerabilities
     83        is announced. The releases run in series, with a letter for each release
     84        after the initial release (e.g. 1.1.1, 1.1.1a, 1.1.1b, etc). Because LFS
     85        installs only the shared libraries, there is no need to recompile packages
     86        which link to <filename class="libraryfile">libcrypto.so</filename> or
     87        <filename class="libraryfile">libssl.so</filename>
     88        <emphasis>when upgrading in the same series.</emphasis>
     89      </para>
     90
     91      <para>
     92        However, any running programs linked to those libraries need to be stopped
     93        and restarted. The following command, run as
     94        <systemitem class="username">root</systemitem> after udating, will list what is
     95        using the old versions of those libraries:
     96      </para>
     97
     98<screen><userinput role="nodump">grep -l  -e 'libssl.*deleted' -e 'libcrypto.*deleted' /proc/*/maps |
     99   tr -cd 0-9\\n | xargs -r ps u</userinput></screen>
     100
     101      <para>
     102        If you used <application>OpenSSH</application> to login to the system, you
     103        need to logout, login again, and rerun that command to confirm nothing is
     104        still using the deleted libraries.
     105      </para>
     106    </note>
    79107
    80108  </sect2>
Note: See TracChangeset for help on using the changeset viewer.