25 Oct
2010
25 Oct
'10
10:57 a.m.
On Monday 25 October 2010, Sherin George wrote:
Hello Guys,
Recently, I have installed some custom packaged of glibc in servers I manage due to vulnerabilities. At that time, official centos packages were not available. Now, I want to roll back to centos versions.
Do note that this new (and probably your custom built) glibc is vulnerable to a new trival local root (so you may want to build yet another custom version instead of switching back):
https://bugzilla.redhat.com/show_bug.cgi?id=cve-2010-3856
/Peter