Wednesday, February 4, 2015

Isilon | GHOST Vulnerability














Isilon and GHOST Vulnerability

A recently discovered, which has been named GHOST, impact only Isilon InsightIQ 1.0 through 3.1 - which is the latest, and OneFS is not affected by this. You can get the complete list effected products at knowledge base article available at EMC website.

What it is: 

GNU C Library's earlier version are vulnerable to a buffer overflow in the gethostbyname() function. Documentation is available at here

It is recommended to upgrade the versions of  "gblic" to the latest available version. All versions earlier than 2.18 are vulnerable.

Latest glibc package is available at here

How to upgrade the gblic:

# sudo yum upgrade <rpm path>

or

# sudo yum upgrade gblic

reboot the server after upgrading the rpm

# sudo reboot now


Redhat documentation is available at here

Also read InsightIQ 3.1 upgrade

Happy Learning!

No comments:

Post a Comment