[358] in linux-security and linux-alert archive
Re: syslog(2), libc-4.7.4: Versions confuse me.
daemon@ATHENA.MIT.EDU (Marek Michalkiewicz)
Tue Sep 12 09:37:04 1995
From: Marek Michalkiewicz <marekm@i17linuxb.ists.pwr.wroc.pl>
To: schiotz@nils.wustl.edu (Jakob Schiotz)
Date: Tue, 12 Sep 1995 10:29:44 +0200 (MET DST)
Cc: linux-security@tarsier.cv.nrao.edu
In-Reply-To: <199509111548.KAA27666@nils.wustl.edu> from "Jakob Schiotz" at Sep 11, 95 10:48:47 am
Jakob Schiotz said:
> The release notes (release.libc-4.7.4) say that I need gcc 3.6.3 (Got
> that one), binutils 2.5.2l.17 (got 2.5.2.6), and ld.so 1.6.7 (got
> 1.6.5).
>
> So it looks like I should update binutils and ld.so. However the
> release notes for binutils (release.binutils-2.5.2l.17) say that I
> need libc-5.0.9 or higher, and that it's for ELF ! Also, the ld.so
> that I can find is version 1.7.3 - isn't that an ELF version?
>
> What should I do? Just install libc-4.7.4 (and pray to the Gods of
> Linux)? Or install install some/all of the dependencies? Or
> (shudder) migrate to ELF? Or just realise that sometimes fixing a
> security hole can do more damage than the hacker could possibly do :-)
I just installed /lib/libc.so.4.7.4 (only the binary, no include files
or anything else), fixed utmp symlinks (blame the fsstnd people for
changing the standard too often...) and ran ldconfig. The system is
slackware 2.1 (gcc 2.5.8, libc 4.5.26). On another, much older box
I had to upgrade /lib/ld.so and /sbin/ldconfig (to the ones from
slackware 2.1). Both machines still seem to work :-).
Marek
