Active Topics
-
List of well performing apps on Leste (34)
to Maemo 7 / Leste by biketool - 6 hrs, 24 mins ago -
Maemo repository (5)
to Community by dredlok706 - 2 days, 1 hr ago -
Re-commissioning N9 in 2018 (127)
to MeeGo / Harmattan by smatkovi - 2 days, 4 hrs ago -
Porting apps to Leste (41)
to Maemo 7 / Leste by Arno_11 - 2 days, 21 hrs ago -
N900 is not recognizable on any of my devices (windows 10,7, xp) What can I do? (1)
to Nokia N900 by nieldk - 4 days, 9 hrs ago - more...
| The Following 9 Users Say Thank You to szopin For This Useful Post: | ||
|
2015-01-29
, 18:21
|
|
Posts: 646 |
Thanked: 1,124 times |
Joined on Jul 2010
@ Espoo, Finland
|
#2
|
Originally Posted by szopin
The post from Qualys lists at the bottom a link to the Qualys security advisory which contains a short C program to test whether a system is vulnerable or not, so it should be pretty simple to verify when a system is 'patched'.
last version from Aapo eglibc-2.17.90 should actually be safe
| The Following User Says Thank You to minimos For This Useful Post: | ||
|
|
2015-01-31
, 22:43
|
|
Posts: 254 |
Thanked: 509 times |
Joined on Nov 2011
@ Canada
|
#3
|
Here's the compiled test program. Shows "vulnerable" for the n900 on latest CSSU-thumb.
versions affected 2.2-2.17.x (fixed between 17 and 18, not exactly sure which)
this thread could maybe get some much needed love:
http://talk.maemo.org/showthread.php?t=89467
last version from Aapo eglibc-2.17.90 should actually be safe as they are from June 2013 and the fix was in May (though still issues with calendar)
http://talk.maemo.org/showpost.php?p...4&postcount=29