Results 1 to 3 of 3

Thread: libc6 flaw worry

  1. #1
    Senior Member registered user
    Join Date
    May 2006
    Location
    Columbia, Maryland USA
    Posts
    1,631

    libc6 flaw worry

    .
    I expressed my concern about the following news item to Klaus K:
    http://www.eweek.com/security/linux-...libc-flaw.html

    His comment on this was the following:
    Me too, since all glibc >= 2.9 versions till today are affected, with
    the glibc on Knoppix being no exception.

    For exploiting the vulnerability, the attacker must own the directly
    queried DNS server (i.e. the users access point, or the ISPs DNS server)
    and send manipulated DNS replies from there, or be able to hijack TCP
    connections, and in most cases, programs will just crash on the
    getaddrinfo() library call, but code injection on the stack may be
    possible. Though an attack isn't really easy, it's a real possibility.

    The easy commandline method (for USB flash disk users) for fixing the
    problem, thanks to debian's quick reaction in the unstable branch, would be:

    sudo apt-get update ; sudo apt-get install -t unstable libc6
    which also updates libc6 dependencies.
    I did this on my Knoppix 7.6.1 LiveUSB, and it updated my libc6 to 2.21.0,
    and didn't take up much space on my reiserfs persistence.

    IMO, it may be wise to make this interim correction, since updating the
    whole 4Gb Knoppix iso might not happen right away.

  2. #2
    Senior Member registered user
    Join Date
    May 2006
    Location
    Columbia, Maryland USA
    Posts
    1,631
    Should read updated to libc6 2.21-9, not 2.21.0.
    Last edited by utu; 02-23-2016 at 01:33 AM.

  3. #3
    Senior Member registered user
    Join Date
    May 2006
    Location
    Columbia, Maryland USA
    Posts
    1,631

    A reminder, in case you are not using 7.7.0.

    Regarding libc6...

    http://www.linux-magazine.com/Issues/2016/187/Ask-Klaus

    You don't need to buy the article, just see the first post here.
    Last edited by utu; 05-13-2016 at 06:07 PM.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


Supermicro 4U 36 Bay Storage Server 2.4Ghz 8-C 128GB 1x1280W Rails TrueNAS ZFS picture

Supermicro 4U 36 Bay Storage Server 2.4Ghz 8-C 128GB 1x1280W Rails TrueNAS ZFS

$721.06



Dell PowerEdge R630 8SFF 2.6Ghz 20-Core 128GB Mem 4x1G RJ-45 NIC 2x750W PSU picture

Dell PowerEdge R630 8SFF 2.6Ghz 20-Core 128GB Mem 4x1G RJ-45 NIC 2x750W PSU

$399.04



~DAILY DEALZ ~ Apple Mac Pro: Intel Xeon 32GB RAM 1TB SSD 1 Year Warranty picture

~DAILY DEALZ ~ Apple Mac Pro: Intel Xeon 32GB RAM 1TB SSD 1 Year Warranty

$284.99



CSE-118 Supermicro 1U 3x GPU Server  2.1Ghz 16-C 128GB CX353A 2x1600W PSU Rails picture

CSE-118 Supermicro 1U 3x GPU Server 2.1Ghz 16-C 128GB CX353A 2x1600W PSU Rails

$450.03



Intel Xeon Gold 6138 2.0GHz 27.5MB 20-Core 125W LGA3647 SR3B5 picture

Intel Xeon Gold 6138 2.0GHz 27.5MB 20-Core 125W LGA3647 SR3B5

$46.00



Intel Xeon E5-2697 V4 2.30 GHz 18C 2011-3 2400MHz 45MB 145W SR2JV CPU Processor picture

Intel Xeon E5-2697 V4 2.30 GHz 18C 2011-3 2400MHz 45MB 145W SR2JV CPU Processor

$49.99



Intel Xeon E5-2690V2 3.00GHz 10-Core (SR1A5) Processor CPU READ DESCRIPTION picture

Intel Xeon E5-2690V2 3.00GHz 10-Core (SR1A5) Processor CPU READ DESCRIPTION

$12.00



CM8066002031501 INTEL XEON E5-2680V4 2.40GHZ 35MB 14-CORE 120W PROCESSOR picture

CM8066002031501 INTEL XEON E5-2680V4 2.40GHZ 35MB 14-CORE 120W PROCESSOR

$19.95



HP Workstation Z640 2x Xeon E5-2623V4 32GB Ram 512 SSD Quadro K420 Linux GA picture

HP Workstation Z640 2x Xeon E5-2623V4 32GB Ram 512 SSD Quadro K420 Linux GA

$243.59



Intel Xeon E5-2697 v2 2.7GHz 30M 12-Core LGA2011 CPU Processor SR19H picture

Intel Xeon E5-2697 v2 2.7GHz 30M 12-Core LGA2011 CPU Processor SR19H

$27.99