Search code examples
debianglibc

How can I fix Ghost (glibc) BUG on Debian 6

Problem is, that there seems to be no updates for glibc if I run 

apt-get upgrade

How can I check if my system has this vulnerability, and how can I fix it?

Solution

  • Add the following lines to /etc/apt/sources.list (see https://wiki.debian.org/LTS/Using):

    deb http://http.debian.net/debian/ squeeze-lts main contrib non-free
deb-src http://http.debian.net/debian/ squeeze-lts main contrib non-free

    Run

    > apt-get update

    Check that package list has been updated:

    > apt-cache show libc6 | grep Version
Version: 2.11.3-4
Version: 2.11.3-4+deb6u4  # 'deb6u4' is the fixed version

    Update libc

    > apt-get install libc6

    Check update result:

    > dpkg -l libc6

    ... 'deb6u4' must be displayed in the list.

    It is recommended to restart the system after fix.