Skip to Content.
Sympa Menu

sm-discuss - [SM-Discuss] We have a vulnerable glibc (2.13) in stable

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: David Kowis <dkowis AT shlrm.org>
  • To: sm-discuss <sm-discuss AT lists.ibiblio.org>
  • Subject: [SM-Discuss] We have a vulnerable glibc (2.13) in stable
  • Date: Wed, 28 Jan 2015 09:08:38 -0600

As of 28 Jan 2015:
http://dbg.download.sourcemage.org/grimoire/codex/stable/libs/glibc/DETAILS


https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability

If I'm parsing that DETAILS file correctly (which by the way, it's super
nasty), it's possible to get a glibc version of 2.13, which is super
vulnerable to all sorts of things.

My upgrade history with glibc has not been very good, as in when I
update glibc, somehow I manage to hork the entire system and have to
reinstall, so I'd appreciate it if someone else worked on it, heh.

Also, it should be known that you can get a vulnerable glibc in stable
sourcemage. So this is making it known

Attachment: signature.asc
Description: OpenPGP digital signature




Archive powered by MHonArc 2.6.24.

Top of Page