sm-discuss AT lists.ibiblio.org
Subject: Public SourceMage Discussion List
List archive
[SM-Discuss] We have a vulnerable glibc (2.13) in stable
- From: David Kowis <dkowis AT shlrm.org>
- To: sm-discuss <sm-discuss AT lists.ibiblio.org>
- Subject: [SM-Discuss] We have a vulnerable glibc (2.13) in stable
- Date: Wed, 28 Jan 2015 09:08:38 -0600
As of 28 Jan 2015:
http://dbg.download.sourcemage.org/grimoire/codex/stable/libs/glibc/DETAILS
https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability
If I'm parsing that DETAILS file correctly (which by the way, it's super
nasty), it's possible to get a glibc version of 2.13, which is super
vulnerable to all sorts of things.
My upgrade history with glibc has not been very good, as in when I
update glibc, somehow I manage to hork the entire system and have to
reinstall, so I'd appreciate it if someone else worked on it, heh.
Also, it should be known that you can get a vulnerable glibc in stable
sourcemage. So this is making it known
Attachment:
signature.asc
Description: OpenPGP digital signature
-
[SM-Discuss] We have a vulnerable glibc (2.13) in stable,
David Kowis, 01/28/2015
- Re: [SM-Discuss] We have a vulnerable glibc (2.13) in stable, Vlad Glagolev, 01/29/2015
Archive powered by MHonArc 2.6.24.