Re: [cobalt-security] Qubes - hacked

[Michael Stauber <cobalt@xxxxxxxxxxxxxx>]

Hi Randy,

> I just restored a Qube 3 with OSRCD standard. Start up the wizard and
> installed the first patch 2 patches:
> Sun Cobalt System Update 1.0
> Qube3-All-Security-2.0.1-13453
>
> I am getting this msg in a telnet session:
>
> login: admin
> Password:
> You have mail.
> [admin admin]$ mail
> BUG IN DYNAMIC LINKER ld.so: dynamic-link.h: 57: elf_get_dynamic_info:
> Assertion
>  `! "bad dynamic tag"' failed!
> [admin admin]$
>
>
> What's going on?

13453 is one of the GLIBC updates for the Qube and judging on the error 
message you've got here we can assume that it is related. The "Bug in dynamic 
linker" usually pops up when there is a library problem. 

Did your reboot after installing 13453? If you skipped the reboot, then that 
could explain the problem.

Otherwise it could be that the GLIBC update didn't install properly. Do an 
"rpm -qa | grep glibc-" and if your Qube 3 is fully up to date on patches it 
should read like this:

glibc-devel-2.1.3-21
compat-glibc-5.2-2.0.7.2
glibc-profile-2.1.3-21
glibc-2.1.3-21

If the version numbers of glibc, glibc-devel and glibc-profile do not match 
each other, then you know that 13453 didn't install properly and caused this 
problem. 

A fix in that case? Gunzip and untar the 13453 PKG file and force the 
installation of the RPM(s).

-- 

With best regards,

Michael Stauber