Re: Glibc Vulnerability -- CVE-2015-0235

2015-01-28 Thread li...@rhsoft.net
Am 28.01.2015 um 15:38 schrieb Benny Pedersen: On 28. jan. 2015 14.57.27 li...@rhsoft.net li...@rhsoft.net wrote: all serious distributions have a newer glibc or offer updates Jan 28 05:41:58 Updated: glibc-common-2.5-123.el5_11.1.x86_64 Jan 28 05:42:03 Updated: glibc-2.5-123.el5_11.1.x86_64

Re: Glibc Vulnerability -- CVE-2015-0235

2015-01-28 Thread li...@rhsoft.net
Am 28.01.2015 um 07:18 schrieb Benny Pedersen: On 28. jan. 2015 06.50.31 Peter pe...@pajamian.dhs.org wrote: Honestly, I don't know if postfix uses that function or not, but if postfix isn't vulnerable then you almost certainly have some other program on your box that is. I would recommend

Re: Glibc Vulnerability -- CVE-2015-0235

2015-01-28 Thread Benny Pedersen
On 28. jan. 2015 14.57.27 li...@rhsoft.net li...@rhsoft.net wrote: all serious distributions have a newer glibc or offer updates Jan 28 05:41:58 Updated: glibc-common-2.5-123.el5_11.1.x86_64 Jan 28 05:42:03 Updated: glibc-2.5-123.el5_11.1.x86_64 what version of glibc is that ?, did you

Re: Glibc Vulnerability -- CVE-2015-0235

2015-01-28 Thread Wietse Venema
Vijay Rajah: Hello, I'm sure most of you are aware of the latest Glibc vulnerability. (FYI: http://www.openwall.com/lists/oss-security/2015/01/27/9) I'm not sure If postfix is vulnerable. I see from that posting that, exim under certain configurations, is vulnerable. I think since

Re: Glibc Vulnerability -- CVE-2015-0235

2015-01-27 Thread Benny Pedersen
On 28. jan. 2015 06.50.31 Peter pe...@pajamian.dhs.org wrote: On 01/28/2015 06:17 PM, Vijay Rajah wrote: Hello, I'm sure most of you are aware of the latest Glibc vulnerability. (FYI: http://www.openwall.com/lists/oss-security/2015/01/27/9) I'm not sure If postfix is vulnerable. I see

Re: Glibc Vulnerability -- CVE-2015-0235

2015-01-27 Thread Jonas Wielicki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 FWIW, in the original advisory at [1], section 4, there is a snippet of C you can use to test whether you are vulnerable. If you are, you should probably upgrade asap. The fact that no exploit for a specific program has been found is no final proof

Glibc Vulnerability -- CVE-2015-0235

2015-01-27 Thread Vijay Rajah
Hello, I'm sure most of you are aware of the latest Glibc vulnerability. (FYI: http://www.openwall.com/lists/oss-security/2015/01/27/9) I'm not sure If postfix is vulnerable. I see from that posting that, exim under certain configurations, is vulnerable. I think since postfix supports

Re: Glibc Vulnerability -- CVE-2015-0235

2015-01-27 Thread Peter
On 01/28/2015 06:17 PM, Vijay Rajah wrote: Hello, I'm sure most of you are aware of the latest Glibc vulnerability. (FYI: http://www.openwall.com/lists/oss-security/2015/01/27/9) I'm not sure If postfix is vulnerable. I see from that posting that, exim under certain configurations, is