Results 1 to 3 of 3

Thread: libc6 flaw worry

  1. #1
    Senior Member registered user
    Join Date
    May 2006
    Location
    Columbia, Maryland USA
    Posts
    1,631

    libc6 flaw worry

    .
    I expressed my concern about the following news item to Klaus K:
    http://www.eweek.com/security/linux-...libc-flaw.html

    His comment on this was the following:
    Me too, since all glibc >= 2.9 versions till today are affected, with
    the glibc on Knoppix being no exception.

    For exploiting the vulnerability, the attacker must own the directly
    queried DNS server (i.e. the users access point, or the ISPs DNS server)
    and send manipulated DNS replies from there, or be able to hijack TCP
    connections, and in most cases, programs will just crash on the
    getaddrinfo() library call, but code injection on the stack may be
    possible. Though an attack isn't really easy, it's a real possibility.

    The easy commandline method (for USB flash disk users) for fixing the
    problem, thanks to debian's quick reaction in the unstable branch, would be:

    sudo apt-get update ; sudo apt-get install -t unstable libc6
    which also updates libc6 dependencies.
    I did this on my Knoppix 7.6.1 LiveUSB, and it updated my libc6 to 2.21.0,
    and didn't take up much space on my reiserfs persistence.

    IMO, it may be wise to make this interim correction, since updating the
    whole 4Gb Knoppix iso might not happen right away.

  2. #2
    Senior Member registered user
    Join Date
    May 2006
    Location
    Columbia, Maryland USA
    Posts
    1,631
    Should read updated to libc6 2.21-9, not 2.21.0.
    Last edited by utu; 02-23-2016 at 01:33 AM.

  3. #3
    Senior Member registered user
    Join Date
    May 2006
    Location
    Columbia, Maryland USA
    Posts
    1,631

    A reminder, in case you are not using 7.7.0.

    Regarding libc6...

    http://www.linux-magazine.com/Issues/2016/187/Ask-Klaus

    You don't need to buy the article, just see the first post here.
    Last edited by utu; 05-13-2016 at 06:07 PM.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


IBM QRadar xx29 Server 4412Q2A picture

IBM QRadar xx29 Server 4412Q2A

$419.99



IBM Power8 S822L 20-Core 3.42GHz 256Gb 1.2Tb 10GbE 2U Linux Server - 8247-22L picture

IBM Power8 S822L 20-Core 3.42GHz 256Gb 1.2Tb 10GbE 2U Linux Server - 8247-22L

$519.96



ibm server z series picture

ibm server z series

$16000.00



IBM 8284-22A S822 Dual Power8 Cpu 512Gb (16x 32Gb) RAM  picture

IBM 8284-22A S822 Dual Power8 Cpu 512Gb (16x 32Gb) RAM

$795.00



IBM SYSTEM x3200 M3 Tower- Intel i3 540 @ 3.07GHz, 4GB, 500GB HHD picture

IBM SYSTEM x3200 M3 Tower- Intel i3 540 @ 3.07GHz, 4GB, 500GB HHD

$125.00



IBM CS821 20-Core 2.827GHz 128Gb 1.92Tb SSD 1U Linux Server - 8005-12N Power 8 picture

IBM CS821 20-Core 2.827GHz 128Gb 1.92Tb SSD 1U Linux Server - 8005-12N Power 8

$479.96



IBM SYSTEM X3200 M3 732854U Tower Server INTEL XEON X3450 2.67Ghz 4GB SEE NOTES picture

IBM SYSTEM X3200 M3 732854U Tower Server INTEL XEON X3450 2.67Ghz 4GB SEE NOTES

$49.72



IBM System x3650 (7945AC1) Server up to 288GB Ram over 10TB of storage picture

IBM System x3650 (7945AC1) Server up to 288GB Ram over 10TB of storage

$450.00



IBM Lenovo X3650 M5 2U 8x 2.5” CTO Rack Server – 2x HS, 2x 750W picture

IBM Lenovo X3650 M5 2U 8x 2.5” CTO Rack Server – 2x HS, 2x 750W

$199.00



IBM System x3650 M4 2U 6LFF Rackmount Server 64GB 2*Xeon E5-2630 v2 2.6GHz 6C picture

IBM System x3650 M4 2U 6LFF Rackmount Server 64GB 2*Xeon E5-2630 v2 2.6GHz 6C

$126.58