The UChecker tool will detect if any out-of-date shared libraries are present on disk or in-memory. This function differs from other scanners that will not detect outdated versions resident in memory. It’s important to note that the package manager for your Linux distribution will not replace any libraries held in memory that are in use.
* uChecker is open source. As a rule of thumb, you should always check the source code of programs you download from the internet before running them, so this is the way to go if you have the necessary programming skills. Download the source code, look at the python code, and run uChecker locally.
Libraries can be updated by restarting all processes by rebooting the server. However, this will disrupt any processes that are in use and result in service downtime. The alternative option is to use Tuxcare’s live patching LibraryCare service to update outdated libraries and apply security patches to libraries such as OpenSSL and glibc while they are in memory.
Application of the updates will not need a server reboot. This solution will significantly reduce service disruption and narrow the window for exploitation of any vulnerabilities in your system.