[CLUE-Tech] Re: Red Hat 9 & glibc

[Friedman, Jason]

I have the same problem.  I suppose I should be a good citizen and report this to RedHat/Fedora.

In the meantime, I read the same warning regarding SSL and took it to mean the vulnerability is that someone can crash your SSH daemon, not that someone can bypass the daemon and log in to the box.  I decided that I can worry about upgrading after a crash, if any.  Not sure if you are in the same boat.

> Can someone tell me exactly how to upgrade to the latest 
> glibc version 
> on a Red Hat 9 machine without destroying the box? EVERY time 
> I try to 
> update glibc, I end up having to reinstall.  I'm using 
> packages from here:
> 
> https://rhn.redhat.com/errata/RHSA-2003-325.html
> 
> I download all the i386 rpms, and then dump them into a folder called 
> "rpms" and then I run this as root:
> 
> rpm -Uvh *.rpm
> 
> Almost all the time, something will fail, and I'll end up having to 
> resinstall because now glibc is shot.  The reason I am trying 
> to do is 
> is because I'm trying to get the latest ssl rpms, but they 
> are telling 
> me this:
...[omitted]