gfxgfx
 
Please login or register.

Login with username, password and session length
 
gfx gfx
gfx
74987 Posts in 13105 Topics by 2619 Members - Latest Member: rjvdmeijden December 03, 2016, 09:38:41 AM
*
gfx*gfx
gfx
WinMX World :: Forum  |  Discussion  |  WinMx World News  |  Use Linux? Stop what you're doing and apply this patch
gfx
gfxgfx
 

Author Topic: Use Linux? Stop what you're doing and apply this patch  (Read 262 times)

0 Members and 1 Guest are viewing this topic.

Use Linux? Stop what you're doing and apply this patch
« on: February 17, 2016, 01:50:51 AM »
A buffer-overflow vulnerability uncovered Tuesday in the GNU C Library poses a serious threat to countless Linux users.

Dating back to the release of glibc 2.9 in 2008, CVE-2015-7547 is a stack-based buffer overflow bug in the glibc DNS client-side resolver that opens the door to remote code execution when a particular library function is used. Software using the function can be exploited with attacker-controlled domain names, attacker-controlled DNS servers or man-in-the-middle attacks.

Glibc, which was also at the core of the "Ghost" vulnerability found last year, is a C library that defines system calls and other basic functions on Linux systems. Its maintainers had apparently been alerted of the new problem last July, but it's not clear if any remediation effort was launched at that time.

Google and Red Hat independently reported the problem this week and a patch is now available.

"Our initial investigations showed that the issue affected all the versions of glibc since 2.9," Google explained in its Online Security Blog. "You should definitely update if you are on an older version, though. If the vulnerability is detected, machine owners may wish to take steps to mitigate the risk of an attack."

http://www.cio.com.au/article/594074/use-linux-stop-what-re-doing-apply-patch/

Offline Pri

  • MX Hosts
  • *****
  • *****
Re: Use Linux? Stop what you're doing and apply this patch
« Reply #1 on: February 21, 2016, 03:54:34 PM »
Just wanted to add. If you're using PFSense it's not affected as it doesn't include Glibc by default, it's something a user would have to intentionally install on their own.

Re: Use Linux? Stop what you're doing and apply this patch
« Reply #2 on: February 21, 2016, 08:05:25 PM »
nice, thanks pri

WinMX World :: Forum  |  Discussion  |  WinMx World News  |  Use Linux? Stop what you're doing and apply this patch
 

gfxgfx
gfx
©2005-2016 WinMXWorld.com. All rights reserved.
SMF 2.0.12 | SMF © 2016, Simple Machines
Page created in 0.042 seconds with 23 queries.
Helios Multi © Bloc
gfx
Powered by MySQL Powered by PHP Valid XHTML 1.0! Valid CSS!