Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Wed 22 Nov 2017, 16:40
All times are UTC - 4
 Forum index » House Training » HOWTO ( Solutions )
glibc upgrade
Moderators: Flash, Ian, JohnMurga
Post new topic   Reply to topic View previous topic :: View next topic
Page 5 of 5 [63 Posts]   Goto page: Previous 1, 2, 3, 4, 5
Author Message
watchdog

Joined: 28 Sep 2012
Posts: 1492
Location: Italy

PostPosted: Tue 27 Dec 2016, 00:39    Post subject:  

When the bug was found lucid ubuntu 10.04, which originally came with glibc 2.11, was out of support so I think there is not a patched glibc 2.11. I don't care very much about glibc vulnerabilities because I use puppy as client and many vulnerabilities are effective only as server side.
Back to top
View user's profile Send private message 
sindi

Joined: 16 Aug 2009
Posts: 733
Location: Ann Arbor MI USA

PostPosted: Fri 30 Dec 2016, 15:27    Post subject: Patched glibc 2.11 in Dec 28 2016 Lucid 5.2.8.7  

Rerwin (in Lucid Puppy Revitalized as 5.2.8.7) just updated glibc 2.11 to a patched version in the latest Lucid Puppy 2016 (which may become 2017 if there are still bugs).

Updates since Dec 16:

glibc 2.11 updated (0ubuntu7.21) with all its Lucid security fixes including for GHOST. (prompted by sindi's question about it)
- asound_include - support coexistent sound applications (result of keniv's interest in puppybt)
- getflash with updated URL to restore the function
- Extract-pet avoids leaving behind the (tar.gz, tar.xz) tarball used for extraction
- PPM help page link fixed (reported by Snail)
Download directory: https://www.mediafire.com/folder/dh45w4tt6qqxd/2016_Release

I was looking for a patched 2.11 because someone at Pale Moon did not want to compile for an insecure glibc and the glibc 2.17 he compiled for instead won't work with Lucid Puppy. It sounds like Pale Moon is willing to compile special versions to work with Puppy Linux. They were planning to compile in future with CentOS7 and the result won't even work with Tahr (libstdc++ can't find what it wants).
The complete change list: http://www.murga-linux.com/puppy/viewtopic.php?p=932697#932697

I hope this is the last update for a while, although I expect to address issues if they arise.
Richard
Back to top
View user's profile Send private message 
watchdog

Joined: 28 Sep 2012
Posts: 1492
Location: Italy

PostPosted: Fri 30 Dec 2016, 16:01    Post subject:  

There is the so-called "ghost" vulnerability and another vulnerability discovered on February 2016:

http://www.murga-linux.com/puppy/viewtopic.php?t=105429

glibc 2.11 updated (0ubuntu7.21) was built in 2015:

https://launchpad.net/~ubuntu-security/+archive/ubuntu/ppa/+build/7011724

Is it really patched for the last vulnerability? I don't worry about this but I hope someone can answer my question.
Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 5 of 5 [63 Posts]   Goto page: Previous 1, 2, 3, 4, 5
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » House Training » HOWTO ( Solutions )
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0540s ][ Queries: 14 (0.0127s) ][ GZIP on ]