GHOST bug/exploit in Linux - Critical

[Dave]

http://arstechnica.com/security/2015...linux-systems/
http://www.zdnet.com/article/critica...ty-hole-found/

Basically this bug makes it possible to remotely gain access to a Linux server by exploiting this bug, although a service needs to be running on the server which uses the function that contains the bug, you never know what service/software uses this.
You can test if you're vulnerable with this http://security.stackexchange.com/a/80213

Be sure to patch your VPS/dedicated server. How to patch.
In case you use shared hosting, inform your host and ask them if they patched it or if they can patch it asap.

[Marv]

This info should be somehow more prominent..

[Lynne]

I had actually asked my host about this the other day and had patched my site. But, they didn't tell me to do a reboot. I just now ran the test and it said I wasn't vulnerable. Then I checked to see if there were any dynamically linked programs still using the old version of glibc and I got a list of about 15 items. So, I rebooted and now I don't get any programs listed.

Anyway, thank you for posted that!

[Marv]

Thanks for the heads up, Lynne. Hadn?t rebooted until I read your post

[AusPhotography]

Not vulnerable here

[Paul M]

Oh what fun ...... all my servers now patched.

[CarpCharacin]

i contacted my webhost and they said that their hardware was the best and that if you have good hardware your os is secure. What lies...

[ozzy47]

Time to get a new host.

[ForceHSS]

Can someone explain how does one run this a step by step would be helpful

[ozzy47]

Did you read this, How to patch.

Me personally, I had my host do it, I pay them enough money.