MESSAGE
DATE | 2016-02-21 |
FROM | Rick Moen
|
SUBJECT | Re: [Hangout-NYLXS] security with glibc and gethostbyname
|
Quoting Ruben Safir (ruben.safir-at-my.liu.edu):
> http://arstechnica.com/security/2016/02/extremely-severe-bug-leaves-dizzying-number-of-apps-and-devices-vulnerable/ > > anyone see this?
Yes.
That's probably not the question you really wanted to ask.
There are local mitigations. And of course you can upgrade glibc to get the new libresolv code. (Wouldn't it be nice if glibc were no longer using BIND8 spaghetti code?)
In other news, my wife and I are just back from Republic of Kiribati, Samoa, Fiji, Vanuatu, New Caledonia, and Australia. And yes, it was a terrible bother dealing with SOuth Pacific sunshine and beaches.
_______________________________________________ hangout mailing list hangout-at-nylxs.com http://www.nylxs.com/
|
|