If you’ve used Linux in the last 20 years, there’s a good chance you’ve met Debian—even if you didn’t realize it. This is the story of how a college student’s manifesto became one of the most quietly influential projects in the open-source world.
On October 19, 2016, a privilege escalation vulnerability in the Linux kernel was disclosed. The bug is nicknamed Dirty COW because the underlying issue was a race condition in the way kernel handles copy-on-write (COW). Dirty COW has existed for a long time — at least since 2007, with kernel version 2.6.22 — so the vast majority of servers are at risk. Exploiting this bug means that a regular, unprivileged user on your server can gain write access to any file they can read, and can therefore increase their privileges on the system. More information can be found on CVE-2016-5195 from Canonical, Red Hat, and Debian. Fortunately, most major distributions have already released a fix. You can follow this tutorial to see if your server is vulnerable and to apply updates as needed. Check Vulnerability Ubuntu/Debian To find out if your server is affected, check your kernel version. uname -rv
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 |
> cd /root > wget http://www.openssl.org/source/openssl-0.9.7b.tar.gz > tar -xvzf openssl-0.9.7b.tar.gz > cd openssl-0.9.7b > ./config > make > make test > make install > cd .. > mv openssl-0.9.7b.tar.gz archive/ > rm -rf openssl-0.9.7b > cd /root > wget http://www.gzip.org/zlib/zlib-1.1.4.tar.gz > tar -xvzf zlib-1.1.4.tar.gz > cd zlib-1.1.4 > ./configure > make > make install > cd .. > mv zlib-1.1.4.tar.gz archive/ > rm -rf zlib-1.1.4 > cd /root > wget ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.6.1p2.tar.gz > tar -xvzf openssh-3.6.1p2.tar.gz > cd openssh-3.6.1p2 > ./configure --prefix=/usr --sysconfdir=/etc/ssh > make > make install > /etc/init.d/ssh restart > cd .. > mv openssh-3.6.1p2.tar.gz archive/ > rm -rf openssh-3.6.1p2/ |
Reliable Penguin provides managed web hosting, systems administration, website and server migrations, and expert consulting.
Submit the form—or for immediate service call 866-649-7984.