RE: [cobalt-security] Qubes - hacked

["Randy Russell" <rrussell@xxxxxxxxxxxxxx>]

The Qube3-All-Security-4.0.1-13453.pkg via download to the GUI did a force
reboot on the Qube3.  I download most of the packages on to my local hd so I
don't waste time re-download them or get a timed out while doing the patch.
Reboot the box and I can't get to the GUI at all. Getting ready to try to
re-install it again. Getting tired of it.

-Randy

-----Original Message-----
From: cobalt-security-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-security-admin@xxxxxxxxxxxxxxx]On Behalf Of Michael
Stauber
Sent: Wednesday, April 30, 2003 5:58 PM
To: cobalt-security@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-security] Qubes - hacked


Hi Randy,

> I just restored a Qube 3 with OSRCD standard. Start up the wizard and
> installed the first patch 2 patches:
> Sun Cobalt System Update 1.0
> Qube3-All-Security-2.0.1-13453
>
> I am getting this msg in a telnet session:
>
> login: admin
> Password:
> You have mail.
> [admin admin]$ mail
> BUG IN DYNAMIC LINKER ld.so: dynamic-link.h: 57: elf_get_dynamic_info:
> Assertion
>  `! "bad dynamic tag"' failed!
> [admin admin]$
>
>
> What's going on?

13453 is one of the GLIBC updates for the Qube and judging on the error
message you've got here we can assume that it is related. The "Bug in
dynamic
linker" usually pops up when there is a library problem.

Did your reboot after installing 13453? If you skipped the reboot, then that
could explain the problem.

Otherwise it could be that the GLIBC update didn't install properly. Do an
"rpm -qa | grep glibc-" and if your Qube 3 is fully up to date on patches it
should read like this:

glibc-devel-2.1.3-21
compat-glibc-5.2-2.0.7.2
glibc-profile-2.1.3-21
glibc-2.1.3-21

If the version numbers of glibc, glibc-devel and glibc-profile do not match
each other, then you know that 13453 didn't install properly and caused this
problem.

A fix in that case? Gunzip and untar the 13453 PKG file and force the
installation of the RPM(s).

--

With best regards,

Michael Stauber

_______________________________________________
cobalt-security mailing list
cobalt-security@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-security