Control: severity -1 normal Control: tags -1 - security Am 03.10.2014 um 01:43 schrieb Vincent Lefevre:
> When a vulnerability is corrected, it is important to restart > the daemon. But this was not done correctly, and the vulnerable > version is still running! > > root 1990 1 0 Sep29 ? 00:00:00 /usr/sbin/rsyslogd > > And from the output during the upgrade: > > Setting up rsyslog (8.4.2-1) ... > [ ok ] Stopping enhanced syslogd: rsyslogd already stopped. > [....] Starting enhanced syslogd: rsyslogd Already running. If you want to > run multiple instances, you need to specify different pid files (use -i > option) > [ ok ady started. > > Something seems to be really wrong... Looks like a bug in start-stop-daemon which is used by the sysv init script. When running under systemd this is not an issue. You should poke the dpkg maintainers. -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth?
signature.asc
Description: OpenPGP digital signature