[Bug 1895708] Re: Openssl should integrate with needrestart better

[Launchpad Bug Tracker]

This bug was fixed in the package openssl - 1.1.1f-1ubuntu4

---------------
openssl (1.1.1f-1ubuntu4) groovy; urgency=medium

  * Cherrypick upstream fix for non-interactive detection on Linux. LP:
    #1879826
  * Cherrypick AES CTR-DRGB: performance improvement LP: #1799928
  * Skip services restart & reboot notification if needrestart is in-use
    LP: #1895708

 -- Dimitri John Ledkov <xnox at ubuntu.com>  Tue, 15 Sep 2020 18:04:36
+0100

** Changed in: openssl (Ubuntu)
       Status: Triaged => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1895708

Title:
  Openssl should integrate with needrestart better

Status in openssl package in Ubuntu:
  Fix Released

Bug description:
  [Impact]

   * needrestart is a better solution to track and restart services that use openssl
   * when needrestart is available, openssl should not ask about restarting services or rebooting the host, as needrestart is a better way to report that.

  [Test Case]

   * Install needrestart
   * Upgrade openssl
   * Observe that openssl debconf questions about restarting services are not raised, and requirement to reboot the system is not raised

  [Regression Potential]

   * Needrestart may be installed, but dpkg/apt hooks could have been
  disabled, in such scenarios one may not see any notifications that one
  needs to do something to their system to ensure that openssl using
  applications are restarted to become protected.

  [Other Info]
   
   * glibc, libpam potentially need similar fixes.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1895708/+subscriptions