I have been seeing a lot about the newly discovered vulnerability in the glibc library which can be exploited (albeit with difficulty) by attackers.
Here is a (fire and brimstone) article on the subject: http://arstechnica.com/security/2016/02/extremely-severe-bug-leaves-dizzying-number-of-apps-and-devices-vulnerable/
I understand the nature of the vulnerability, but I have to admit I get a bit lost when reading the patch solution. It seems that several steps need to be taken on the machine, but it says a "patch" is attached to the email.
Where is the patch exactly?
I apologize, but I am not a Linux system engineer (aptitude and yum are my homeboys).
Unfortunately, I manage a few sites for clients mostly on Amazon linux which I have read may be susceptible as well - let's assume they are.
I just want to make sure I secure the boxes, I am probably capable of applying the patch, but I think i get confused by the glibc mail archive.
Can anyone shed some light on it - ie put it in a language us lowly front-end web devs can understand?
I know this is new/evolving I'm sure better docs will be available in the coming days.
Thanks in advance.