<div dir="ltr">Thank you</div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Jan 28, 2015 at 12:50 PM, Kambey L. Kisambu via Linux <span dir="ltr"><<a href="mailto:linux@lists.habari.co.tz" target="_blank">linux@lists.habari.co.tz</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hello Linux/System Admins,<br>
<br>
If you running CentOS or RedHat based OS then kindly ASAP upgdate the<br>
glibc library as there is a glibc vulnerability as below:-<br><br><table style="font-family:inherit;letter-spacing:normal;text-indent:0px;text-transform:none;word-spacing:0px;border-collapse:collapse;border-spacing:0px;width:600px;margin:0px auto;background:none repeat scroll 0% 0% rgb(241,241,241)" border="0" cellpadding="0" cellspacing="0" width="600"><tbody><tr><td colspan="2" style="text-align:right" align="right" height="40" valign="middle" width="100%"><a style="margin-right:10px;font-size:11px;color:rgb(102,102,102);vertical-align:middle">View in a Web Browser</a></td></tr><tr><td colspan="2" height="45" width="100%"><a><img alt="Red Hat" border="0" height="45" width="140"></a></td></tr><tr><td style="width:440px;text-align:left;vertical-align:middle" width="440"><div style="padding:0px 40px 0px 0px"><h1 style="margin:20px 0px;color:rgb(204,0,0);text-transform:uppercase;line-height:1.2em;font-size:24px">GHOST GLIBC LIBRARY VULNERABILITY</h1><a style="padding:8px 12px;text-transform:uppercase;color:rgb(255,255,255);font-size:12px;line-height:1em;text-decoration:none;background:none repeat scroll 0% 0% rgb(204,0,0)">LEARN MORE</a></div></td><td style="width:160px;text-align:center;vertical-align:middle" align="center" valign="middle" width="160"><img alt="" border="0"></td></tr><tr><td colspan="2" height="40"><img alt="" border="0" height="40" width="1"></td></tr><tr><td colspan="2" style="font-size:13px;line-height:1.5em;color:rgb(51,51,51);padding:20px;background:none repeat scroll 0% 0% rgb(255,255,255)" width="100%"><p>Red Hat Product Security is aware of a critical vulnerability in the glibc library. This vulnerability is commonly known as GHOST and has been assigned<span> </span><a style="color:rgb(0,102,204)"><strong>CVE-2015-0235</strong></a>.</p><p>GHOST is a 'buffer overflow' bug affecting the gethostbyname() and gethostbyname2() function calls in the glibc library. This vulnerability allows a remote attacker to execute arbitrary code with the permissions of the user running the application.</p><p>The gethostbyname() function calls are used for DNS resolving, which is a very common event. To exploit this vulnerability, an attacker must trigger a buffer overflow by supplying an invalid hostname argument to an application that then calls gethostbyname().</p><p><strong>The easiest way to check vulnerability and/or confirm remediation is the Red Hat Access Lab:<span> </span><a style="color:rgb(0,102,204)"><strong>GHOST - gethostbyname Detector</strong></a></strong></p><p>For more information, please see this Red Hat Customer Portal<span> </span><a style="color:rgb(0,102,204)"><strong>Knowledge Article</strong></a>.</p><p>If you have questions or concerns, please contact<span> </span><a style="color:rgb(0,102,204)"><strong>Red Hat Technical Support</strong></a>.</p></td></tr></tbody></table><br><div>-- <br><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">
<p style="margin-bottom:0in;text-align:left" lang="en-GB">
<font face="Arial, sans-serif"><font style="font-size:9pt">Kambey
L. Kisambu<br>ICT Officer - Systems Administration
<br>e-Government Agency, President's Office, Public
Service Management<br>Samora Avenue, Extelecom Building, 2nd
Floor<br>P.O.Box 4273<br>Dar es Salaam<br>Mobile:
+25576(1)7688450<br>Phone: <a value="+255222129868">+255222129868</a>/74<br>Email:
kambey.lotoishe</font></font><span style="text-decoration:none"><font face="Arial, sans-serif"><font style="font-size:9pt">@<a>ega.go.tz</a></font></font></span><font face="Arial, sans-serif"><font style="font-size:9pt"><br>Personal Email: <a>kambeylk@gmail.com</a><br></font></font></p><p style="margin-bottom:0in;text-align:left" lang="en-GB"><font><font face="Arial, sans-serif">Website: </font></font><a>www.ega.go.tz</a> <br></p><p style="margin-bottom:0in;text-align:left" lang="en-GB"><font face="Arial, sans-serif"><font style="font-size:9pt"></font></font><a><span style="text-decoration:none"></span></a></p>
<p style="margin-bottom:0in;text-align:left" lang="en-GB">
</p>
<p style="margin-bottom:0in;text-align:left" lang="en-GB">
<span style="text-decoration:none">“<b><font face="Arial, sans-serif"><font style="font-size:9pt">You
Are Never Old To Set Another Goal Or To Dream A New Dream”</font></font></b></span></p><p style="margin-bottom:0in;text-align:left" lang="en-GB"><span style="text-decoration:none"><b><font face="Arial, sans-serif"><font style="font-size:9pt"><br></font></font></b></span></p>
</div></div></div></div></div></div></div></div>
</div></div>
<br>_______________________________________________<br>
The Arusha Linux User Group: <a href="http://unix.or.tz">http://unix.or.tz</a><br>
Linux mailing list<br>
<a href="mailto:Linux@lists.habari.co.tz">Linux@lists.habari.co.tz</a><br>
<a href="http://lists.habari.co.tz/cgi-bin/mailman/listinfo/linux">http://lists.habari.co.tz/cgi-bin/mailman/listinfo/linux</a><br>
<br>
The Arusha LUG mailing list is generously hosted by Habari Node Ltd: <a href="http://www.habari.co.tz/">http://www.habari.co.tz/</a><br>
<br>
The above comments and data are owned by whoever posted them (including attachments if any). The mailing list host is not responsible for them in any way.<br></blockquote></div><br></div>