LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 01-28-2015, 04:15 PM   #1
czezz
Member
 
Registered: Nov 2004
Distribution: Slackware/Solaris
Posts: 924

Rep: Reputation: 43
Mayday mayday mayday! - glibc, Slackware 12


Seems that building glibc for Slack12 (I know its oldie), due to latest security hole, is gonna be quite painful.
At first I still cant find patches or even sources for 2.5 branch. Maybe I wasnt looking in the right place or maybe there is a way to upgrade Slack12 to the supported branch ?

Does anyone know ?
 
Old 01-28-2015, 04:29 PM   #2
Didier Spaier
LQ Addict
 
Registered: Nov 2008
Location: Paris, France
Distribution: Slint64-15.0
Posts: 11,056

Rep: Reputation: Disabled
Back up the files you want to keep, and install a more recent Slackware version, preferably 14.1 if your hardware can handle it, but at least 13.0 as older versions won't be patched any more. The more recent version you install, the longer it will be supported.

Last edited by Didier Spaier; 01-28-2015 at 06:03 PM.
 
2 members found this post helpful.
Old 01-28-2015, 06:00 PM   #3
ReaperX7
LQ Guru
 
Registered: Jul 2011
Location: California
Distribution: Slackware64-15.0 Multilib
Posts: 6,558
Blog Entries: 15

Rep: Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097
Debian and Ubuntu might have patches for 2.5 but yes, patches will be few. You could ask the glibc developers as well.
 
Old 01-28-2015, 11:32 PM   #4
kikinovak
MLED Founder
 
Registered: Jun 2011
Location: Montpezat (South France)
Distribution: CentOS, OpenSUSE
Posts: 3,453

Rep: Reputation: 2154Reputation: 2154Reputation: 2154Reputation: 2154Reputation: 2154Reputation: 2154Reputation: 2154Reputation: 2154Reputation: 2154Reputation: 2154Reputation: 2154
Quote:
Originally Posted by czezz View Post
At first I still cant find patches or even sources for 2.5 branch. Maybe I wasnt looking in the right place or maybe there is a way to upgrade Slack12 to the supported branch ?

Does anyone know ?
Yes. Upgrade to a supported release.
 
Old 01-29-2015, 12:37 AM   #5
ReaperX7
LQ Guru
 
Registered: Jul 2011
Location: California
Distribution: Slackware64-15.0 Multilib
Posts: 6,558
Blog Entries: 15

Rep: Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097
There's also the option of trying to harden the system. It would take some work, but hardening the system might help. Might not help much, but if you can't upgrade for any specific reason, it's your best shot.

It's an older topic, but it should translate enough for 12.x

http://www.linuxquestions.org/questi...-guide-299708/

Last edited by ReaperX7; 01-29-2015 at 12:40 AM.
 
Old 01-29-2015, 01:13 AM   #6
ruario
Senior Member
 
Registered: Jan 2011
Location: Oslo, Norway
Distribution: Slackware
Posts: 2,557

Rep: Reputation: 1761Reputation: 1761Reputation: 1761Reputation: 1761Reputation: 1761Reputation: 1761Reputation: 1761Reputation: 1761Reputation: 1761Reputation: 1761Reputation: 1761
Quote:
Originally Posted by czezz View Post
Maybe I wasnt looking in the right place or maybe there is a way to upgrade Slack12 to the supported branch ?
Yeah there is, you follow the steps in slackware-12.1/UPGRADE.TXT, slackware-12.2/UPGRADE.TXT and slackware-13.0/UPGRADE.TXT sequentially.

Though, it would be quicker and easier IMHO to backup your configuration files and local data and do a 14.1 install.

Both may sound painful but you will save yourself from trouble next time there is a major issue.
 
Old 01-29-2015, 04:34 AM   #7
czezz
Member
 
Registered: Nov 2004
Distribution: Slackware/Solaris
Posts: 924

Original Poster
Rep: Reputation: 43
Where do you guys look for glibc patches (source code) ?
I was looking at this location http://ftp.gnu.org/gnu/glibc/ but there are no patches. Only releases.
 
Old 01-29-2015, 07:49 AM   #8
Richard Cranium
Senior Member
 
Registered: Apr 2009
Location: McKinney, Texas
Distribution: Slackware64 15.0
Posts: 3,858

Rep: Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225
I'd look in the git repo for libc, myself.

http://sourceware.org/git/?p=glibc.git
 
Old 01-29-2015, 08:47 AM   #9
aaazen
Member
 
Registered: Dec 2009
Posts: 358

Rep: Reputation: Disabled
Quote:
Originally Posted by czezz View Post
Where do you guys look for glibc patches (source code) ?
I was looking at this location http://ftp.gnu.org/gnu/glibc/ but there are no patches. Only releases.
I spotted the patch while reading this forum:

https://news.ycombinator.com/item?id=8953545

The original patch was applied to glibc 2.17 for upgrading to 2.18

It might well work on other versions of glibc. Comment out ('#' in column 1) the parts about updating the ChangeLog and the NEWS files.

https://sourceware.org/git/?p=glibc....53bf9a4926845d

Click on "patch"
 
Old 02-04-2015, 06:33 AM   #10
czezz
Member
 
Registered: Nov 2004
Distribution: Slackware/Solaris
Posts: 924

Original Poster
Rep: Reputation: 43
Hi, thank you all for your answers.
I probably was not clear enough with my last post.

If you look at the patch repository for Slackweare12 for glibc: http://mirrors.slackware.com/slackwa.../source/glibc/
then you can find there glibc patches/diffs itself. Eg:
Code:
glibc.CVE-2010-3847.diff.gz
glibc.CVE-2010-3856.diff.gz
I guess these 2 files were produced by glibc developers. There probably exist some repository/ftp server where they are avaliable for download. If I am not mistaken, the latest diff/patch as well as other glibc diffs/patches should be also there.

Does anyone know the location diff/patche files for glibc ?
 
Old 02-04-2015, 06:51 AM   #11
Didier Spaier
LQ Addict
 
Registered: Nov 2008
Location: Paris, France
Distribution: Slint64-15.0
Posts: 11,056

Rep: Reputation: Disabled
Quote:
Originally Posted by czezz View Post
Does anyone know the location diff/patche files for glibc ?
This question should be directly adressed to glibc maintainers:

http://www.gnu.org/software/libc/development.html

Good luck.
 
Old 02-04-2015, 06:52 AM   #12
ReaperX7
LQ Guru
 
Registered: Jul 2011
Location: California
Distribution: Slackware64-15.0 Multilib
Posts: 6,558
Blog Entries: 15

Rep: Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097
Um... You probably might want to stick to Google on that searching "glibc-2.5.x patches" or similar. If anything, Debian's, Slackware's, and maybe Gentoo might be the best places to look. Older LinuxFromScratch books might be useful also.

If anything, you might want to research the glibc hardening patches as well for 2.5.x if any still exist. These patches are high security patches that aim to prevent security issues. They aren't always 100%, but for your case, it might help. Be sure to test the patch first before editing the Slackbuild and redraft the diff as needed. Kompare from KDE is useful for this.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Mayday! How do I manually mount my encrypted ext3 external usb disk? simonsharry Linux - Newbie 11 02-15-2009 04:49 AM
Mayday, I need to fix fstab, pls help! Mail2me Linux - Newbie 5 01-20-2009 03:54 PM
Mayday Mayday w5uc Linux - Newbie 7 04-15-2005 07:25 PM
glibc and Slackware 9 lt1derful Slackware 9 07-21-2003 05:35 AM
Slackware 8.1 and GLIBC 2.3 Bengt Slackware 1 11-12-2002 10:23 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 10:50 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration