[Discuss] GHOST fix for legacy systems

Richard Pieri richard.pieri at gmail.com
Thu Jan 29 14:49:00 EST 2015


Just a heads-up. If you're thinking to build glibc 2.18-2.20 on legacy 
systems to address the GHOST vulnerability, don't bother. The ABIs have 
changed. You'll need a new run-time loader that knows about the new ABI 
and then you may need to compile other libraries to work with the new 
loader.

Instead, the simpler approach is to find the glibc sources for your 
distro and manually apply Andreas Schwab's patch. You may need to patch 
the code by hand because it's a Git diff and you may not have Git on a 
legacy box or it may not work with the build system. Here's the patch:

https://sourceware.org/ml/libc-alpha/2013-01/msg00809.html

-- 
Rich P.



More information about the Discuss mailing list