maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Maemo 5 / Fremantle (https://talk.maemo.org/forumdisplay.php?f=40)
-   -   GHOST - glibc vulnerability (https://talk.maemo.org/showthread.php?t=94529)

szopin 2015-01-28 16:10

GHOST - glibc vulnerability
 
https://community.qualys.com/blogs/l...-vulnerability

versions affected 2.2-2.17.x (fixed between 17 and 18, not exactly sure which)

this thread could maybe get some much needed love:
http://talk.maemo.org/showthread.php?t=89467

last version from Aapo eglibc-2.17.90 should actually be safe as they are from June 2013 and the fix was in May (though still issues with calendar)
http://talk.maemo.org/showpost.php?p...4&postcount=29

minimos 2015-01-29 18:21

Re: GHOST - glibc vulnerability
 
Quote:

Originally Posted by szopin (Post 1458533)
last version from Aapo eglibc-2.17.90 should actually be safe

The post from Qualys lists at the bottom a link to the Qualys security advisory which contains a short C program to test whether a system is vulnerable or not, so it should be pretty simple to verify when a system is 'patched'.

shawnjefferson 2015-01-31 22:43

Re: GHOST - glibc vulnerability
 
1 Attachment(s)
Here's the compiled test program. Shows "vulnerable" for the n900 on latest CSSU-thumb.


All times are GMT. The time now is 00:56.

vBulletin® Version 3.8.8