This Week In Security: Glibc, Ivanti, Jenkins, And Runc

There’s a fun buffer overflow problem in the Glibc __vsyslog_internal() function. This one’s a real rollercoaster, because logging vulnerabilities are always scary, but at a first look,…

Sicherheitslücken in der GNU C Bibliothek

Die GNU C Bibliothek glibc ist neben dem Kernel eine der wichtigsten Komponenten einer Linux-Distribution. Kürzlich wurden erneut mehrere Sicherheitslücken entdeckt.

glibc is still not Y2038 compliant by default

Most of my readers are probably aware of the Y2038 issue by now. If not, it refers to 3:14:07 UTC on January 19, 2038, when 32-bit time_t will overflow. The Linux kernel has internally switched to …