glibc vulnerability aka Ghost

[ocabj]

I hope all of you are updating glibc packages or recompiling to mitigate the getbyhostname() vulnerability.

Buffer overflow has been confirmed by Qualys.

http://www.openwall.com/lists/oss-security/2015/01/27/9

[deebix]

Working in this industry I can appreciate the heads up, however, maybe you should give a little bit more of what and why for noobs and novice devs. thx

[ocabj]

Working in this industry I can appreciate the heads up, however, maybe you should give a little bit more of what and why for noobs and novice devs. thx

There's a complete code walkthrough in that URL.

I think it's pretty obvious the ramifications that a vulnerability in a linked library will have on a system to anyone in IT, especially one like this that hinges on a (albeit deprecated) name to IP address resolution function.