Linux admins, get patching. New vulnerability found in Glibc

[TonyRPH]

This is quite a bad one.

Qualys Security Advisory CVE-2015-0235

GHOST: glibc gethostbyname buffer overflow

[mw88]

Joy.. 8 Production servers, 2 dev servers and 2 Ubuntu desktops to patch.

Tomorrow's going to be fun!

[cornet]

mw88 said:

Joy.. 8 Production servers, 2 dev servers and 2 Ubuntu desktops to patch.

Tomorrow's going to be fun!

Is that all...

We've patched 120+ servers today... Don't forget to restart any services that use gethostbyname()

[onomatopoeia]

cornet said:

Is that all...

We've patched 120+ servers today... Don't forget to restart any services that use gethostbyname()

exim seems the only common one that is remotely exploitable from what I've been reading. Apache, mysql/maria etc appear in the clear.

Qualys seem to have done an awful lot of work on this before it was made public on Tuesday, the advisory was an impressive piece of work.