{"id":1670,"date":"2016-02-17T16:02:35","date_gmt":"2016-02-17T09:02:35","guid":{"rendered":"https:\/\/cloud.z.com\/vn\/?p=1670"},"modified":"2016-02-17T16:02:35","modified_gmt":"2016-02-17T09:02:35","slug":"important-notice-in-glibc","status":"publish","type":"post","link":"https:\/\/domain.z.com\/vn\/news-news\/important-notice-in-glibc\/","title":{"rendered":"\u3010Th\u00f4ng b\u00e1o quan tr\u1ecdng\u3011L\u01b0u \u00fd v\u1ec1 l\u1ed7 h\u1ed5ng glibc (CVE-2015-7547)"},"content":{"rendered":"

Ng\u00e0y 17 th\u00e1ng 2 n\u0103m 2016, m\u1ed9t l\u1ed7 h\u1ed5ng \u0111\u00e3 \u0111\u01b0\u1ee3c t\u00ecm th\u1ea5y trong Library glibc hi\u1ec7n \u0111ang s\u1eed d\u1ee5ng r\u1ed9ng r\u00e3i nh\u01b0 Linux\u2026 \u0110\u00f3 l\u00e0 m\u1ed9t l\u1ed7 h\u1ed5ng \u1edf c\u1ea5p \u0111\u1ed9 nghi\u00eam tr\u1ecdng.<\/p>

Do v\u1eady, n\u00f3 c\u00f3 kh\u1ea3 n\u0103ng g\u00e2y ra tr\u00e0n b\u1ed9 \u0111\u1ec7m v\u00e0 th\u1ef1c hi\u1ec7n t\u00f9y \u00fd c\u00e1c \u0111o\u1ea1n m\u00e3 t\u1eeb xa. L\u1ed7 h\u1ed5ng n\u00e0y \u0111\u01b0\u1ee3c sinh ra do s\u1eed d\u1ee5ng m\u1ed9t h\u00e0m s\u1ed1 \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 \u201cgetaddrinfo()\u201d hi\u1ec7n \u0111ang \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 ph\u00e2n gi\u1ea3i t\u00ean t\u1ea1i nhi\u1ec1u h\u1ec7 th\u1ed1ng, n\u00ean n\u00f3 s\u1ebd g\u00e2y \u1ea3nh h\u01b0\u1edfng cho nhi\u1ec1u \u1ee9ng d\u1ee5ng.<\/p>

Hi\u1ec7n t\u1ea1i, c\u00f4ng ty ch\u00fang t\u00f4i \u0111ang \u0111i\u1ec1u tra ph\u1ea1m vi \u1ea3nh h\u01b0\u1edfng c\u1ee7a v\u1ea5n \u0111\u1ec1 n\u00e0y. Ngay sau khi c\u00f3 th\u00f4ng tin m\u1edbi nh\u1ea5t, ch\u00fang t\u00f4i s\u1ebd th\u00f4ng b\u00e1o cho c\u00e1c qu\u00fd v\u1ecb t\u1ea1i trang web n\u00e0y. <\/u><\/strong><\/p>

\u25c6C\u00e1c \u1ea3nh h\u01b0\u1edfng v\u00e0 h\u1ed7 tr\u1ee3 cho kh\u00e1ch h\u00e0ng c\u1ee7a Z.com<\/strong>\u25c6<\/h2>

C\u00f3 m\u1ed9t s\u1ed1 OS \u0111\u01b0\u1ee3c cung c\u1ea5p b\u1edfi Z.com s\u1ebd ch\u1ecbu \u1ea3nh h\u01b0\u1edfng c\u1ee7a l\u1ed7 h\u1ed5ng n\u00e0y. C\u00e1c OS ch\u1ecbu \u1ea3nh h\u01b0\u1edfng nh\u01b0 b\u1ea3ng d\u01b0\u1edbi \u0111\u00e2y. \u0110\u1ed1i v\u1edbi c\u00e1c kh\u00e1ch h\u00e0ng s\u1eed d\u1ee5ng nh\u1eefng h\u00ecnh \u1ea3nh n\u00e0y, vui l\u00f2ng th\u1ef1c hi\u1ec7n \u201cC\u1eadp nh\u1eadt glibc\u201d v\u00e0 \u201cX\u00e1c nh\u1eadn phi\u00ean b\u1ea3n sau c\u1eadp nh\u1eadt\u201d. <\/strong><\/p>

B\u00ean c\u1ea1nh \u0111\u00f3, \u0111\u1ed1i v\u1edbi c\u00e1c h\u00ecnh \u1ea3nh \u1ee9ng d\u1ee5ng, do \u0111\u01b0\u1ee3c x\u00e2y d\u1ef1ng d\u1ef1a tr\u00ean CentOS v\u00e0 Ubuntu n\u00ean vui l\u00f2ng th\u1ef1c hi\u1ec7n theo tr\u00ecnh t\u1ef1 gi\u1ed1ng v\u1edbi OS. (Docker v\u00e0 Drone l\u00e0 Ubuntu, c\u00f2n l\u1ea1i \u0111\u1ec1u l\u00e0 CentOS)<\/p>

\"Untitled\"<\/a><\/p>

\u203b\u0110\u1ed1i v\u1edbi Fedora23, Fedora22, openSUSE42.1, Arch Linux, hi\u1ec7n t\u1ea1i ch\u00fang t\u00f4i ch\u01b0a cung c\u1ea5p b\u1ea3n c\u1eadp nh\u1eadt.<\/p>

\u203bXin l\u01b0u \u00fd t\u00f9y v\u00e0o mirror site s\u1eed d\u1ee5ng m\u00e0 c\u0169ng c\u00f3 tr\u01b0\u1eddng h\u1ee3p ch\u01b0a \u0111\u01b0\u1ee3c ph\u1ea3n \u00e1nh glibc m\u1edbi nh\u1ea5t.<\/p>

—————————————————————————————————————————————————–<\/p>

Th\u00f4ng tin tham kh\u1ea3o<\/h3>

CVE-2015-7547: glibc getaddrinfo stack-based buffer overflow<\/a><\/p>

L\u1ed7 h\u1ed5ng trong Library <\/u>\u201c<\/u>glibc<\/u>\u201d, \u1ea3nh h\u01b0\u1edfng nghi\u00eam trong tr\u00ean ph\u1ea7n l\u1edbn c\u00e1c <\/u>Linux \u2013 ITmedia <\/u>Enterprise<\/u><\/p>

CentOS https:\/\/lists.centos.org\/pipermail\/centos-announce\/2016-February\/021672.html<\/a> https:\/\/lists.centos.org\/pipermail\/centos-announce\/2016-February\/021668.html<\/a><\/p>

Ubuntu http:\/\/www.ubuntu.com\/usn\/usn-2900-1\/<\/a><\/p>

Debian https:\/\/security-tracker.debian.org\/tracker\/CVE-2015-7547<\/a><\/p>

Fedora https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=1308943<\/a><\/p>

Scientific https:\/\/www.scientificlinux.org\/sl-errata\/slsa-20160176-1\/<\/a><\/p>

openSUSE https:\/\/bugzilla.novell.com\/show_bug.cgi?id=CVE-2015-7547<\/a><\/p>

Arch Linux https:\/\/bugs.archlinux.org\/task\/48213<\/a><\/p>","protected":false},"excerpt":{"rendered":"

Ng\u00e0y 17 th\u00e1ng 2 n\u0103m 2016, m\u1ed9t l\u1ed7 h\u1ed5ng \u0111\u00e3 \u0111\u01b0\u1ee3c t\u00ecm th\u1ea5y trong Library glibc hi\u1ec7n \u0111ang s\u1eed d\u1ee5ng r\u1ed9ng r\u00e3i nh\u01b0 Linux\u2026 \u0110\u00f3 l\u00e0 m\u1ed9t l\u1ed7 h\u1ed5ng \u1edf c\u1ea5p \u0111\u1ed9 nghi\u00eam tr\u1ecdng.Do v\u1eady, n\u00f3 c\u00f3 kh\u1ea3 n\u0103ng g\u00e2y ra tr\u00e0n b\u1ed9 \u0111\u1ec7m v\u00e0 th\u1ef1c hi\u1ec7n t\u00f9y \u00fd c\u00e1c \u0111o\u1ea1n m\u00e3 t\u1eeb xa. L\u1ed7 […]<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[181],"tags":[],"_links":{"self":[{"href":"https:\/\/domain.z.com\/vn\/wp-json\/wp\/v2\/posts\/1670"}],"collection":[{"href":"https:\/\/domain.z.com\/vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/domain.z.com\/vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/domain.z.com\/vn\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/domain.z.com\/vn\/wp-json\/wp\/v2\/comments?post=1670"}],"version-history":[{"count":0,"href":"https:\/\/domain.z.com\/vn\/wp-json\/wp\/v2\/posts\/1670\/revisions"}],"wp:attachment":[{"href":"https:\/\/domain.z.com\/vn\/wp-json\/wp\/v2\/media?parent=1670"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/domain.z.com\/vn\/wp-json\/wp\/v2\/categories?post=1670"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/domain.z.com\/vn\/wp-json\/wp\/v2\/tags?post=1670"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}