Re: Question about SunRPC/Glibc XDR decoder vulnerability

Gilbert Sebenste wrote:
> 
> Hello all,
> 
> I was wondering...after we download the patch from our vendors, as UNIDATA
> recommended we do...do we have to recompile the LDM or reboot the machine
> or restart the LDM or any/all of the above?
> 
> Thanks!
> 
> *******************************************************************************
> Gilbert Sebenste                                                     ********
> Internet: gilbert@xxxxxxx    (My opinions only!)                     ******
> Staff Meteorologist, Northern Illinois University                      ****
> E-mail: sebenste@xxxxxxxxxxxxxxxxxxxxx                                 ***
> web: http://weather.admin.niu.edu                                      **
> Work phone: 815-753-5492                                                *
> *******************************************************************************

Hi Gilbert,

The LDM uses these libraries dynamically, i.e., they are used when they
are needed and they are not compiled into the code like a static library
would be.  So you don't need to recompile the LDM, but you do need to
restart it so it will use the new libraries.   However, if you have
other applications that use the libraries statically they would need to
be recompiled.  A reboot is not necessary.

Anne
-- 
***************************************************
Anne Wilson                     UCAR Unidata Program            
anne@xxxxxxxxxxxxxxxx                  P.O. Box 3000
                                  Boulder, CO  80307
----------------------------------------------------
Unidata WWW server       http://www.unidata.ucar.edu/
****************************************************