99精品国产综合久久久久五月天,免费观看欧美大片毛片不用播放器 ,AV无码理论片在线观看免费网站,国产精品国产成人国产三级

標(biāo)題: [求助] 老大 1月27日發(fā)布的 Linux Glibc庫(kù)嚴(yán)重安全漏洞修復(fù)通知如何操作��？ [打印本頁(yè)]

作者: 3g210 時(shí)間: 2015-1-30 17:17 標(biāo)題: 老大 1月27日發(fā)布的 Linux Glibc庫(kù)嚴(yán)重安全漏洞修復(fù)通知如何操作��？

本帖最后由 3g210 于 2015-1-30 17:20 編輯

老大，1月27日發(fā)布的這個(gè) Linux Glibc庫(kù)嚴(yán)重安全漏洞修復(fù)通知如何操作��？小白們搞不懂！
我的操作系統(tǒng)是
CentOS 6.3 64位，謝謝！

Linux Glibc庫(kù)嚴(yán)重安全漏洞修復(fù)通知

尊敬的阿里云ECS用戶：

您好，日前Linux GNU glibc標(biāo)準(zhǔn)庫(kù)的 gethostbyname函數(shù)爆出緩沖區(qū)溢出漏洞，漏洞編號(hào)為CVE-2015-0235。黑客可以通過(guò)gethostbyname系列函數(shù)實(shí)現(xiàn)遠(yuǎn)程代碼執(zhí)行，獲取服務(wù)器的控制權(quán)及Shell權(quán)限，此漏洞觸發(fā)途徑多，影響范圍大，請(qǐng)大家關(guān)注和及時(shí)臨時(shí)修復(fù)，后續(xù)我們會(huì)盡快更新鏡像修復(fù)。請(qǐng)知曉。

一、漏洞發(fā)布日期

2015年1月27日

二、已確認(rèn)被成功利用的軟件及系統(tǒng)

Glibc 2.2到2.17 (包含2.2和2.17版本)

三、漏洞描述

GNU glibc標(biāo)準(zhǔn)庫(kù)的gethostbyname 函數(shù)爆出緩沖區(qū)溢出漏洞，漏洞編號(hào)：CVE-2015-0235。 Glibc 是提供系統(tǒng)調(diào)用和基本函數(shù)的 C 庫(kù)，比如open, malloc, printf等等。所有動(dòng)態(tài)連接的程序都要用到Glibc。遠(yuǎn)程攻擊者可以利用這個(gè)漏洞執(zhí)行任意代碼并提升運(yùn)行應(yīng)用程序的用戶的權(quán)限。

四、漏洞檢測(cè)方法

請(qǐng)自行檢測(cè)：
[[test]]
$ cat > GHOST.c << EOF
#include <netdb.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <errno.h>
#define CANARY"in_the_coal_mine"
struct {
  char buffer[1024];
  char canary[sizeof(CANARY)];
} temp = { "buffer", CANARY };
int main(void) {
  struct hostent resbuf;
  struct hostent *result;
  int herrno;
  int retval;
  /*** strlen (name) = size_needed -sizeof (*host_addr) - sizeof (*h_addr_ptrs) - 1; ***/
  size_t len = sizeof(temp.buffer) -16*sizeof(unsigned char) - 2*sizeof(char *) - 1;
  char name[sizeof(temp.buffer)];
  memset(name, '0', len);
  name[len] = '\0';
  retval = gethostbyname_r(name,&resbuf, temp.buffer, sizeof(temp.buffer), &result, &herrno);
  if (strcmp(temp.canary, CANARY) !=0) {
puts("vulnerable");
exit(EXIT_SUCCESS);
  }
  if (retval == ERANGE) {
puts("notvulnerable");
exit(EXIT_SUCCESS);
  }
  puts("should nothappen");
  exit(EXIT_FAILURE);
}
EOF
[test]
$ gcc GHOST.c -o GHOST
[test]
$./GHOST
vulnerable

五、建議修補(bǔ)方案

特別提示：由于glibc屬于Linux系統(tǒng)基礎(chǔ)組件，為了避免修補(bǔ)對(duì)您服務(wù)器造成影響，建議您選擇合適時(shí)間進(jìn)行修復(fù)，同時(shí)務(wù)必在修復(fù)前通過(guò)快照操作進(jìn)行備份，如果修復(fù)出現(xiàn)問(wèn)題，可以迅速回滾快照恢復(fù)。

Centos 5/6/7：

yum update glibc

Ubuntu 12/14

apt-get update

apt-get install libc6

Debian 6

wget -O /etc/apt/sources.list.d/debian6-lts.list http://mirrors.aliyun.com/repo/debian6-lts.list
apt-get update
apt-get install libc6

Debian 7

apt-get update

apt-get install libc6

Opensuse 13

zypper refresh

zypper update glibc*

Aliyun linux 5u7

wget -O /etc/yum.repos.d/aliyun-5.repo http://mirrors.aliyun.com/repo/aliyun-5.repo
yum update glibc

阿里云ECS團(tuán)隊(duì)

2014年1月29日

作者: admin 時(shí)間: 2015-1-30 17:34

上面這里不是有解決方案了嗎?

作者: 3g210 時(shí)間: 2015-1-30 19:44

回復(fù) 2# admin

老大請(qǐng)你幫忙看下，我是按cbynd的以下方法操作的，不知是否成功更新沒(méi)有？萬(wàn)分感謝！

cbynd你好，我是CentOS 6.3 64位的，現(xiàn)用ssh登陸服務(wù)器，按你如下方法操作的，
CentOS 和 RedHat  更新方法如下:
1）用戶使用root用戶, 在系統(tǒng)上執(zhí)行： # yum clean all; yum update glibc
2) 用戶使用root用戶, 在系統(tǒng)上執(zhí)行： # y
3）以上命令執(zhí)行完成后，查看Glibc版本：# rpm -qa|grep glibc-2.12 （跟右側(cè)對(duì)應(yīng)glibc版本對(duì)應(yīng)的話，說(shuō)明修復(fù)成功）

但是更新后查看Glibc版本情況好象與你描述的不一樣，煩請(qǐng)幫忙看看謝謝！詳見(jiàn)下：
[root@AY140115162727456ea9Z ~]# rpm -qa|grep glibc-2.12
glibc-2.12-1.149.el6_6.5.x86_64

這個(gè)是還沒(méi)有更新前查看顯示的代碼：
[root@AY140115162727456ea9Z ~]# rpm -qa|grep glibc-2.12
glibc-2.12-1.107.el6_4.2.x86_64

從更新前和更新后的代碼看，不知究竟更新成功沒(méi)有？幫忙確認(rèn)下好嗎！
以下是在ssh上更新時(shí)的完整代碼：

[root@AY140115162727456ea9Z ~]# yum clean all; yum update glibc
Loaded plugins: fastestmirror
Cleaning repos: base extras rpmforge updates
Cleaning up Everything
Cleaning up list of fastest mirrors
Loaded plugins: fastestmirror
Determining fastest mirrors
* base: mirrors.hustunique.com
* extras: mirrors.hustunique.com
* rpmforge: ftp.riken.jp
* updates: mirrors.hustunique.com
base                                                    | 3.7 kB    00:00
base/primary_db                                        | 4.6 MB    00:08
extras                                                 | 3.4 kB    00:00
extras/primary_db                                     |  30 kB    00:00
rpmforge                                              | 1.9 kB    00:00
http://ftp.riken.jp/pub/Linux/dag/redhat/el5/en/x86_64/rpmforge/repodata/primary.sqlite.bz2: [Errno 12] Timeout on

http://ftp.riken.jp/pub/Linux/dag/redhat/el5/en/x86_64/rpmforge/repodata/primary.sqlite.bz2: (28, 'Operation too slow. Less than 1 bytes/sec transfered the last 30

seconds')
Trying other mirror.
rpmforge/primary_db                                     | 7.0 MB    00:30
updates                                                 | 3.4 kB    00:00
updates/primary_db                                     | 2.1 MB    00:03
Setting up Update Process
Resolving Dependencies
--> Running transaction check
---> Package glibc.x86_64 0:2.12-1.107.el6_4.2 will be updated
--> Processing Dependency: glibc = 2.12-1.107.el6_4.2 for package: glibc-devel-2.12-1.107.el6_4.2.x86_64
--> Processing Dependency: glibc = 2.12-1.107.el6_4.2 for package: nscd-2.12-1.107.el6_4.2.x86_64
--> Processing Dependency: glibc = 2.12-1.107.el6_4.2 for package: glibc-common-2.12-1.107.el6_4.2.x86_64
--> Processing Dependency: glibc = 2.12-1.107.el6_4.2 for package: glibc-headers-2.12-1.107.el6_4.2.x86_64
---> Package glibc.x86_64 0:2.12-1.149.el6_6.5 will be an update
--> Running transaction check
---> Package glibc-common.x86_64 0:2.12-1.107.el6_4.2 will be updated
---> Package glibc-common.x86_64 0:2.12-1.149.el6_6.5 will be an update
---> Package glibc-devel.x86_64 0:2.12-1.107.el6_4.2 will be updated
---> Package glibc-devel.x86_64 0:2.12-1.149.el6_6.5 will be an update
---> Package glibc-headers.x86_64 0:2.12-1.107.el6_4.2 will be updated
---> Package glibc-headers.x86_64 0:2.12-1.149.el6_6.5 will be an update
---> Package nscd.x86_64 0:2.12-1.107.el6_4.2 will be updated
---> Package nscd.x86_64 0:2.12-1.149.el6_6.5 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
Package          Arch       Version                Repository    Size
================================================================================
Updating:
glibc             x86_64    2.12-1.149.el6_6.5       updates    3.8 M
Updating for dependencies:
glibc-common       x86_64    2.12-1.149.el6_6.5       updates       14 M
glibc-devel       x86_64    2.12-1.149.el6_6.5       updates    983 k
glibc-headers    x86_64    2.12-1.149.el6_6.5       updates    612 k
nscd             x86_64    2.12-1.149.el6_6.5       updates    223 k

Transaction Summary
================================================================================
Upgrade    5 Package(s)

Total download size: 20 M
Is this ok [y/N]: y
Downloading Packages:
(1/5): glibc-2.12-1.149.el6_6.5.x86_64.rpm             | 3.8 MB    00:05
(2/5): glibc-common-2.12-1.149.el6_6.5.x86_64.rpm       |  14 MB    00:25
(3/5): glibc-devel-2.12-1.149.el6_6.5.x86_64.rpm       | 983 kB    00:01
(4/5): glibc-headers-2.12-1.149.el6_6.5.x86_64.rpm    | 612 kB    00:01
(5/5): nscd-2.12-1.149.el6_6.5.x86_64.rpm             | 223 kB    00:00
--------------------------------------------------------------------------------
Total                                        589 kB/s |  20 MB    00:34
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
  Updating : glibc-2.12-1.149.el6_6.5.x86_64                            1/10
  Updating : glibc-common-2.12-1.149.el6_6.5.x86_64                   2/10
  Updating : glibc-headers-2.12-1.149.el6_6.5.x86_64                   3/10
  Updating : glibc-devel-2.12-1.149.el6_6.5.x86_64                      4/10
  Updating : nscd-2.12-1.149.el6_6.5.x86_64                            5/10
warning: /etc/nscd.conf created as /etc/nscd.conf.rpmnew
  Cleanup : glibc-devel-2.12-1.107.el6_4.2.x86_64                      6/10
  Cleanup : glibc-headers-2.12-1.107.el6_4.2.x86_64                   7/10
  Cleanup : nscd-2.12-1.107.el6_4.2.x86_64                            8/10
  Cleanup : glibc-common-2.12-1.107.el6_4.2.x86_64                   9/10
  Cleanup : glibc-2.12-1.107.el6_4.2.x86_64                         10/10
  Verifying  : nscd-2.12-1.149.el6_6.5.x86_64                            1/10
  Verifying  : glibc-common-2.12-1.149.el6_6.5.x86_64                   2/10
  Verifying  : glibc-devel-2.12-1.149.el6_6.5.x86_64                      3/10
  Verifying  : glibc-headers-2.12-1.149.el6_6.5.x86_64                   4/10
  Verifying  : glibc-2.12-1.149.el6_6.5.x86_64                            5/10
  Verifying  : glibc-2.12-1.107.el6_4.2.x86_64                            6/10
  Verifying  : nscd-2.12-1.107.el6_4.2.x86_64                            7/10
  Verifying  : glibc-devel-2.12-1.107.el6_4.2.x86_64                      8/10
  Verifying  : glibc-headers-2.12-1.107.el6_4.2.x86_64                   9/10
  Verifying  : glibc-common-2.12-1.107.el6_4.2.x86_64                   10/10

Updated:
  glibc.x86_64 0:2.12-1.149.el6_6.5

Dependency Updated:
  glibc-common.x86_64 0:2.12-1.149.el6_6.5
  glibc-devel.x86_64 0:2.12-1.149.el6_6.5
  glibc-headers.x86_64 0:2.12-1.149.el6_6.5
  nscd.x86_64 0:2.12-1.149.el6_6.5

Complete!
[root@AY140115162727456ea9Z ~]# rpm -qa|grep glibc-2.12
glibc-2.12-1.149.el6_6.5.x86_64
[root@AY140115162727456ea9Z ~]#

歡迎光臨 WDlinux官方論壇 (http://fudaan.com/bbs/)