{"id":32411,"date":"2023-10-05T23:52:30","date_gmt":"2023-10-05T23:52:30","guid":{"rendered":"https:\/\/www.rbsitsoftwaresolution.com\/blog\/patch-now-this-serious-linux-vulnerability-affects-nearly-all-distributions.html"},"modified":"2023-10-05T23:52:30","modified_gmt":"2023-10-05T23:52:30","slug":"patch-now-this-serious-linux-vulnerability-affects-nearly-all-distributions","status":"publish","type":"post","link":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/patch-now-this-serious-linux-vulnerability-affects-nearly-all-distributions.html","title":{"rendered":"Patch now: This serious Linux vulnerability affects nearly all distributions"},"content":{"rendered":"
<\/p>\n

So, yeah, this is bad news with a capital B for Linux users.\u00a0<\/p>\n

The vulnerability was introduced in April 2021 with the release of glibc 2.34. The flaw is a buffer overflow weakness in the glibc’s ld.so dynamic loader, a crucial component responsible for preparing and executing programs on Linux systems. The vulnerability is triggered when processing the GLIBC_TUNABLES<\/a> environment variable, making it a significant threat to system integrity and security.<\/p>\n

Also: New cryptographic protocol aims to bolster open-source software security<\/a><\/strong><\/p>\n

So, how bad is this really? To quote Saeed Abbasi, Qualys Threat Research Unit Product Manager, “This environment variable, intended to fine-tune and optimize applications linked with glibc, is an essential tool for developers and system administrators. Its misuse or exploitation broadly affects system performance, reliability, and security. \u2026 The ease with which the buffer overflow can be transformed into a data-only attack \u2026 could put countless systems at risk, especially given the extensive use of glibc across Linux distributions.”<\/p>\n

And, yes, I’m sorry to say at least one exploit is already available to take advantage of this hole.\u00a0<\/p>\n

So, what should you do about it? Patch. Patch it now.\u00a0<\/p>\n

Also: 6 simple cybersecurity rules to live by<\/a><\/strong><\/p>\n

The good news is that Red Hat<\/a>, Ubuntu<\/a>, Debian<\/a>, and Gentoo<\/a> have all released their own updates. In addition, the upstream\u00a0glibc code<\/a>\u00a0has been patched with the fix.\u00a0<\/p>\n

If you can’t patch it, Red Hat has a script that should work on most Linux systems to mitigate the problem by setting your system to terminate any setuid program invoked with GLIBC_TUNABLES<\/a> in the environment.\u00a0<\/p>\n

So, get out there, make the patches, run the scripts, and, if you have vulnerable Internet of Things (IoT) devices, lock them down behind a firewall until a fix is in. Finally, as Porky Pig says, “That’s all, folks!”<\/p>\n

Linux<\/h4>\n

<\/p>\n

The best Linux laptops for consumers and developers
\n <\/a><\/p>\n

Want to save your aging computer? Try these 5 Linux distributions
\n <\/a><\/p>\n

The best distros for beginners
\n <\/a><\/p>\n

How to enable Linux on your Chromebook (and why you should)
\n <\/a> <\/p>\n

The best Linux laptops for consumers and developers
\n <\/a><\/li>\n

  • \n

    Want to save your aging computer? Try these 5 Linux distributions
    \n <\/a><\/li>\n

  • \n

    The best distros for beginners
    \n <\/a><\/li>\n

  • \n

    How to enable Linux on your Chromebook (and why you should)
    \n <\/a><\/li>\n<\/ul>\n

    Article source: https:\/\/www.zdnet.com\/article\/patch-now-this-serious-linux-vulnerability-affects-nearly-all-distributions\/#ftag=RSSbaffb68<\/p>","protected":false},"excerpt":{"rendered":"

    So, yeah, this is bad news with a capital B for Linux users.\u00a0 The vulnerability was introduced in April 2021 with the release of glibc 2.34. The flaw is a <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[31],"tags":[34],"class_list":["post-32411","post","type-post","status-publish","format-standard","hentry","category-linux-updates","tag-linux-updates"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t