Results 1 to 3 of 3

Thread: libc6 flaw worry

  1. #1
    Senior Member registered user
    Join Date
    May 2006
    Location
    Columbia, Maryland USA
    Posts
    1,631

    libc6 flaw worry

    .
    I expressed my concern about the following news item to Klaus K:
    http://www.eweek.com/security/linux-...libc-flaw.html

    His comment on this was the following:
    Me too, since all glibc >= 2.9 versions till today are affected, with
    the glibc on Knoppix being no exception.

    For exploiting the vulnerability, the attacker must own the directly
    queried DNS server (i.e. the users access point, or the ISPs DNS server)
    and send manipulated DNS replies from there, or be able to hijack TCP
    connections, and in most cases, programs will just crash on the
    getaddrinfo() library call, but code injection on the stack may be
    possible. Though an attack isn't really easy, it's a real possibility.

    The easy commandline method (for USB flash disk users) for fixing the
    problem, thanks to debian's quick reaction in the unstable branch, would be:

    sudo apt-get update ; sudo apt-get install -t unstable libc6
    which also updates libc6 dependencies.
    I did this on my Knoppix 7.6.1 LiveUSB, and it updated my libc6 to 2.21.0,
    and didn't take up much space on my reiserfs persistence.

    IMO, it may be wise to make this interim correction, since updating the
    whole 4Gb Knoppix iso might not happen right away.

  2. #2
    Senior Member registered user
    Join Date
    May 2006
    Location
    Columbia, Maryland USA
    Posts
    1,631
    Should read updated to libc6 2.21-9, not 2.21.0.
    Last edited by utu; 02-23-2016 at 01:33 AM.

  3. #3
    Senior Member registered user
    Join Date
    May 2006
    Location
    Columbia, Maryland USA
    Posts
    1,631

    A reminder, in case you are not using 7.7.0.

    Regarding libc6...

    http://www.linux-magazine.com/Issues/2016/187/Ask-Klaus

    You don't need to buy the article, just see the first post here.
    Last edited by utu; 05-13-2016 at 06:07 PM.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


Juniper MX104-AC 4 MIC Slot Chassis w/ 2x RE-S-MX104 and 2x PWR-MX104-AC picture

Juniper MX104-AC 4 MIC Slot Chassis w/ 2x RE-S-MX104 and 2x PWR-MX104-AC

$1899.00



*New* MIC-MRATE Juniper 12-Port Multi-Rate MIC module picture

*New* MIC-MRATE Juniper 12-Port Multi-Rate MIC module

$749.00



Juniper 48-Port GbE PoE+ & 4-Port 10GB SFP+ Managed Network Switch EX3300-48P picture

Juniper 48-Port GbE PoE+ & 4-Port 10GB SFP+ Managed Network Switch EX3300-48P

$49.99



Juniper 48-Port PoE GbE Network Switch  w/ Dual Power Supplies F B EX4300-48P picture

Juniper 48-Port PoE GbE Network Switch w/ Dual Power Supplies F B EX4300-48P

$178.99



Juniper Networks EX2300-24P 24 Port Gigabit PoE 4 SFP 1/10G Network Switch picture

Juniper Networks EX2300-24P 24 Port Gigabit PoE 4 SFP 1/10G Network Switch

$119.00



Juniper EX4600-40F-AFO 24x SFP+/SFP & 4x QSFP+ Ports Switch 2XPSU TESTED picture

Juniper EX4600-40F-AFO 24x SFP+/SFP & 4x QSFP+ Ports Switch 2XPSU TESTED

$800.95



Juniper EX3400-48P 48-Port PoE+ 4x SFP+ 2x 40G QSFP+ Dual PSU & Fan AFO Switch picture

Juniper EX3400-48P 48-Port PoE+ 4x SFP+ 2x 40G QSFP+ Dual PSU & Fan AFO Switch

$259.99



Juniper EX4300-48T 48 Port 1G 4 QSFP 40G Dual PSU AFO w/ Rails, EX-UM-4X4SFP Mod picture

Juniper EX4300-48T 48 Port 1G 4 QSFP 40G Dual PSU AFO w/ Rails, EX-UM-4X4SFP Mod

$169.00



Juniper QFX5100-48S 48-Port 10GbE SFP+ 6x40GbE QSFP Network Switch w/Ears Tested picture

Juniper QFX5100-48S 48-Port 10GbE SFP+ 6x40GbE QSFP Network Switch w/Ears Tested

$599.99



Juniper Networks SRX550 Services Gateway Security Appliance with 6x XGPIM 2x PSU picture

Juniper Networks SRX550 Services Gateway Security Appliance with 6x XGPIM 2x PSU

$499.00