Package: needrestart
Version: 2.11-3+deb9u1
Severity: normal

Dear Maintainer,

Here, needrestart recently stopped working automatically in stable.

I am using it with unattended-upgrades.

After libssl upgrade this morning, unattended-upgrades-dpkg.log says things 
like:
systemctl restart nagios-nrpe-server.service

But a ps show that the service has not been restarted for 2 weeks:
nagios     880  0.0  0.1  23912  4084 ?        Ss   Mar13   1:08 /usr/sbin/
nrpe -c /etc/nagios/nrpe.cfg -f

If I run needrestart manually, I am asked whether or not I want to restart 
nagios-nrpe-server.service (cute curse interface). If I answer yes, the 
services are properly restarted.
nagios   21026  0.3  0.1  23912  4316 ?        Ss   12:10   0:00 /usr/sbin/
nrpe -c /etc/nagios/nrpe.cfg -f

I expected needrestart to automatically reload the services using obsolete 
libssl, like it used to.

This bug has major security impact on all my servers, obviously. Luckilly 
nagios plugin mode show which servers are affected and need to be restarted 
manually.

-- Package-specific info:
needrestart output:
Running kernel seems to be up-to-date.
Services to be restarted:
 systemctl restart ntp.service
 systemctl restart ssh.service
No containers need to be restarted.
No user sessions are running outdated binaries.



-- System Information:
Debian Release: 9.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-6-amd64 (SMP w/2 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C.UTF-8 
(charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages needrestart depends on:
ii  dpkg                       1.18.24
ii  gettext-base               0.19.8.1-2
ii  libintl-perl               1.26-2
ii  libmodule-find-perl        0.13-1
ii  libmodule-scandeps-perl    1.23-1
ii  libproc-processtable-perl  0.53-2
ii  libsort-naturally-perl     1.03-1
ii  libterm-readkey-perl       2.37-1
ii  perl                       5.24.1-3+deb9u2
ii  xz-utils                   5.2.2-1.2+b1

Versions of packages needrestart recommends:
ii  libpam-systemd  232-25+deb9u2

Versions of packages needrestart suggests:
pn  needrestart-session | libnotify-bin  <none>

-- no debconf information
Log started: 2018-03-30  06:53:40
Preconfiguring packages ...
(Reading database ... ^M(Reading database ... 5%^M(Reading database ... 10%^M(Reading database ... 15%^M(Reading database ... 20%^M(Reading database ... 25%^M(Reading database ... 30%^M(Reading database ... 35%^M(Reading database ... 40%^M(Reading database ... 45%^M(Reading database ... 50%^M(Reading database ... 55%^M(Reading database ... 60%^M(Reading database ... 65%^M(Reading database ... 70%^M(Reading database ... 75%^M(Reading database ... 80%^M(Reading database ... 85%^M(Reading database ... 90%^M(Reading database ... 95%^M(Reading database ... 100%^M(Reading database ... 47196 files and directories currently installed.)
Preparing to unpack .../libssl1.0.2_1.0.2l-2+deb9u3_amd64.deb ...
Unpacking libssl1.0.2:amd64 (1.0.2l-2+deb9u3) over (1.0.2l-2+deb9u2) ...
Preparing to unpack .../libssl1.1_1.1.0f-3+deb9u2_amd64.deb ...
Unpacking libssl1.1:amd64 (1.1.0f-3+deb9u2) over (1.1.0f-3+deb9u1) ...
Preparing to unpack .../openssl_1.1.0f-3+deb9u2_amd64.deb ...
Unpacking openssl (1.1.0f-3+deb9u2) over (1.1.0f-3+deb9u1) ...
Setting up libssl1.0.2:amd64 (1.0.2l-2+deb9u3) ...
Processing triggers for libc-bin (2.24-11+deb9u3) ...
Setting up libssl1.1:amd64 (1.1.0f-3+deb9u2) ...
Setting up openssl (1.1.0f-3+deb9u2) ...
Processing triggers for man-db (2.7.6.1-2) ...
Processing triggers for libc-bin (2.24-11+deb9u3) ...
Unable to get Terminal Size. The TIOCGWINSZ ioctl didn't work. The COLUMNS and LINES environment variables didn't work. The resize program didn't work. The stty program didn't work. at /usr/share/perl5/NeedRestart/UI.pm line 50.
Running kernel seems to be up-to-date.
Unable to get Terminal Size. The TIOCGWINSZ ioctl didn't work. The COLUMNS and LINES environment variables didn't work. The resize program didn't work. The stty program didn't work. at /usr/share/perl5/NeedRestart/UI.pm line 50.
Services to be restarted:
 systemctl restart nagios-nrpe-server.service
 systemctl restart ntp.service
 systemctl restart ssh.service
Unable to get Terminal Size. The TIOCGWINSZ ioctl didn't work. The COLUMNS and LINES environment variables didn't work. The resize program didn't work. The stty program didn't work. at /usr/share/perl5/NeedRestart/UI.pm line 50.
Services being skipped:
 systemctl restart apt-daily-upgrade.service
Unable to get Terminal Size. The TIOCGWINSZ ioctl didn't work. The COLUMNS and LINES environment variables didn't work. The resize program didn't work. The stty program didn't work. at /usr/share/perl5/NeedRestart/UI.pm line 50.
No containers need to be restarted.
Unable to get Terminal Size. The TIOCGWINSZ ioctl didn't work. The COLUMNS and LINES environment variables didn't work. The resize program didn't work. The stty program didn't work. at /usr/share/perl5/NeedRestart/UI.pm line 50.
No user sessions are running outdated binaries.
Log ended: 2018-03-30  06:53:52
2018-03-30 06:53:15,575 INFO Initial blacklisted packages: 
2018-03-30 06:53:15,591 INFO Initial whitelisted packages: 
2018-03-30 06:53:15,592 INFO Starting unattended upgrades script
2018-03-30 06:53:15,593 INFO Allowed origins are: ['origin=Debian,codename=stretch,label=Debian-Security', 'origin=Debian,codename=stretch', 'origin=Debian,codename=stretch-updates']
2018-03-30 06:53:40,413 INFO Packages that will be upgraded: libssl1.0.2 libssl1.1 openssl
2018-03-30 06:53:40,415 INFO Writing dpkg log to '/var/log/unattended-upgrades/unattended-upgrades-dpkg.log'
2018-03-30 06:53:52,519 INFO All upgrades installed
Mar 30 06:53:13 raie systemd[1]: Starting Daily apt upgrade and clean 
activities...
Mar 30 06:54:01 raie systemd[1]: Started Daily apt upgrade and clean activities.
Mar 30 06:54:01 raie systemd[1]: apt-daily-upgrade.timer: Adding 31min 
5.797539s random time.
Mar 30 06:54:01 raie systemd[1]: apt-daily-upgrade.timer: Adding 23min 
48.853967s random time.

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to