MESSAGE
DATE | 2016-02-21 |
FROM | Ruben Safir
|
SUBJECT | Re: [Hangout-NYLXS] security with glibc and gethostbyname
|
From hangout-bounces-at-nylxs.com Sun Feb 21 03:40:40 2016 Return-Path: X-Original-To: archive-at-mrbrklyn.com Delivered-To: archive-at-mrbrklyn.com Received: from www.mrbrklyn.com (www.mrbrklyn.com [96.57.23.82]) by mrbrklyn.com (Postfix) with ESMTP id 05CE4163DA0; Sun, 21 Feb 2016 03:40:26 -0500 (EST) X-Original-To: hangout-at-nylxs.com Delivered-To: hangout-at-nylxs.com Received: from mail-qg0-f48.google.com (mail-qg0-f48.google.com [209.85.192.48]) by mrbrklyn.com (Postfix) with ESMTP id C104D163D96 for ; Sun, 21 Feb 2016 02:40:53 -0500 (EST) Received: by mail-qg0-f48.google.com with SMTP id y9so92989061qgd.3 for ; Sat, 20 Feb 2016 23:40:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=my.liu.edu; s=google; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-type:content-transfer-encoding; bh=FoPpiAXPuE/0rNs0UZu6vcFN1jGukNaoaF2V2m+2F0k=; b=rAfl8DX+qOqwBeuujnyxmiSUBiQeQQUvtQ85b6InlAZvo2d7WLMn+fuM1wQRXN1p8O tNH3UOjrAC8GRZHYdKaxnH20XuXS6e8QfZ/q++Ds23EMbLkp/6xvkZ7LicF8lgiMjklg 4oMF1XorJKZ1LTOe1R0yFegxvHjZGXBiGtq3Q= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-type :content-transfer-encoding; bh=FoPpiAXPuE/0rNs0UZu6vcFN1jGukNaoaF2V2m+2F0k=; b=fzFD+aEP8K8gh7hJGS6EH07n3xiofdgBftjFIYDHX7Fm7NiU7vNG2y499JYHzsfvfS Wn22jI62rIBE9ofbsvEFCh8+HMS/UEKJDNq+Nt1Ol6sXruiTpvxcEGFjVfWhGSnmDkvE q+HyPX3URpkdBEmpI+r7MsFrPtck1Vt+iAks/e0PS5et9nBiT2c+KZJ+ztGZzbSfAzKH dsHbFfH7vGzs+2zDuztQ05GF560FbwmYHr4uGlFwjGKBccg9vcrAi4YE90tQIau4BY3V xeeG+VMYBw9M+wT8xT2keJ/b/Y5gK2ZGkIZoUPDPGnlYYAUm4wG872aEJkOdSTvLRKHc vUGQ== X-Gm-Message-State: AG10YOQN56ciUgcsk3Fai36nfmdleRLfLQUzV4SKP8rL1hMXRWvnqnRbpESBn20UoQyAn/z3 X-Received: by 10.140.249.6 with SMTP id u6mr28799833qhc.83.1456040453375; Sat, 20 Feb 2016 23:40:53 -0800 (PST) Received: from [10.0.0.19] (www.mrbrklyn.com. [96.57.23.82]) by smtp.googlemail.com with ESMTPSA id e184sm8035924qkb.40.2016.02.20.23.40.52 for (version=TLSv1/SSLv3 cipher=OTHER); Sat, 20 Feb 2016 23:40:52 -0800 (PST) To: hangout-at-nylxs.com References: <56C4027E.4020206-at-my.liu.edu> <20160221065257.GE24965-at-linuxmafia.com> From: Ruben Safir Message-ID: <56C96A04.8000705-at-my.liu.edu> Date: Sun, 21 Feb 2016 02:40:52 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <20160221065257.GE24965-at-linuxmafia.com> Subject: Re: [Hangout-NYLXS] security with glibc and gethostbyname X-BeenThere: hangout-at-nylxs.com X-Mailman-Version: 2.1.17 Precedence: list Reply-To: NYLXS Discussions List List-Id: NYLXS Discussions List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: hangout-bounces-at-nylxs.com Sender: "hangout"
On 02/21/2016 01:52 AM, Rick Moen wrote: > Quoting Ruben Safir (ruben.safir-at-my.liu.edu): > >> http://arstechnica.com/security/2016/02/extremely-severe-bug-leaves-dizzying-number-of-apps-and-devices-vulnerable/ >> >> anyone see this? > > Yes. > > That's probably not the question you really wanted to ask. > > There are local mitigations. And of course you can upgrade glibc to get > the new libresolv code. (Wouldn't it be nice if glibc were no longer > using BIND8 spaghetti code?) >
your saying libresolv was writing by vixie for bind8?
> In other news, my wife and I are just back from Republic of Kiribati, > Samoa, Fiji, Vanuatu, New Caledonia, and Australia. And yes, it was > a terrible bother dealing with SOuth Pacific sunshine and beaches. > > _______________________________________________ > hangout mailing list > hangout-at-nylxs.com > http://www.nylxs.com/ >
-- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com
DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com
Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 _______________________________________________ hangout mailing list hangout-at-nylxs.com http://www.nylxs.com/
|
|