Re: [cobalt-security] Glibc Security Update 2.0.1

["E.B. Dreger" <eddy+public+spam@xxxxxxxxxxxxxxxxx>]

RH> Date: Fri, 25 Apr 2003 17:34:30 +0200
RH> From: Robbert Hamburg


RH> Is it possible for example to install the postgres update
RH> (from solarspeed), kernel and glibc in one go ??

RH> I have a client who wants to know because his servers cant be
RH> rebooted three times in a row he says.
RH>
RH> Any thoughts on that ???

PostgreSQL isn't a big deal.  You'll need to reboot for the
kernel update to take effect.

glibc is the "fun" one... the problem is that GNU/Linux systems
use dynamic linking for virtually all binaries.  This means that
you're upgrading glibc while executing programs are depending on
it -- including the tools used to update the system.  I've seen
many glibc updates fail in the middle and do strange things; I
personally _hate_ updating glibc on a running system.

I'd like to say "update PostgreSQL and the kernel, then glibc,
then reboot".  However, if glibc causes grief, you might be
better knowing you have your old, working kernel.

I suggest going for two reboots -- one after pgsql and the
kernel, and another after glibc.  Do them during low-traffic
hours, and perhaps a day or two apart.


Eddy
--
Brotsman & Dreger, Inc. - EverQuick Internet Division
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 (785) 865-5885 Lawrence and [inter]national
Phone: +1 (316) 794-8922 Wichita

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <blacklist@xxxxxxxxx>
To: blacklist@xxxxxxxxx
Subject: Please ignore this portion of my mail signature.

These last few lines are a trap for address-harvesting spambots.
Do NOT send mail to <blacklist@xxxxxxxxx>, or you are likely to
be blocked.