[Secure-testing-team] Re: [Secure-testing-commits] r1735 - data/DTSA

[Anthony DeRobertis]

Joey Hess wrote:

> +Before installing the update, please note that you will need to restart all

Shouldn't that be AFTER installing the update? I think this is intended
as 'read this before installing the update:', but its also easily read
as 'restart daemons before upgrading this lib'. Its restated below, but
should still be fixed.

> +daemons that link with libpcre3 for the security fix to be used. Either
> +reboot your machine after the upgrade, or make a list of processes that are
> +using libpcre3, and restart them after the upgrade. To generate the list,
> +run this command before you upgrade:
> +
> +lsof /usr/lib/libpcre.so.3

This is not guaranteed to work. In particular, a previous upgrade could
have left a daemon using an unlinked copy of the library.

Suggested re-wording:

After installing this upgrade you will need to restart all daemons that
link with libpcre for the security fix to take effect. Either reboot
your machine after the upgrade or restart the daemons by hand. You can
determine which daemons are affected via the checkrestart command (part
of the debian-goodies package) or by running, as root:
    lsof +L1 | grep libpcre.so.3