Re: Federal agency warns critical Linux vulnerability being actively exploited | Ars Technica

Ted Pomeroy <[email protected]> Mon, 3 Jun 2024 13:44:54 -0600
Newsgroups gmane.org.user-groups.linux.nmglug
Message-ID <CAM7Qav8GZmFMiJ1vKCAH9404DnBDiDzSScKfra4eS5BhGbX70Q@mail.gmail.com>
--===============2157634363425059704==
Content-Type: multipart/related; boundary="000000000000f750f5061a01915d"

--000000000000f750f5061a01915d
Content-Type: multipart/alternative; boundary="000000000000f750f3061a01915c"

--000000000000f750f3061a01915c
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Brian, Probably not at all. Note the breadth of the problem and the level.
It affects a broad range of kernels, and will be attended to by the people
who can address this at the kernel level. Keep an eye on updates, that is
do them regularly, but no need to panic. I am assuming you are not running
the servers for Cisco or AWS, just doing personal business on your machine.
You do turn it off at night?
I usually like to be aware of the issues, but have confidence in the people
at the kernel and OS levels who can address any issue, whether in the
kernel, the OS or any application I am likely to use. I also try to be
aware of my system's usual behaviors: amount of ram and cpu in normal use,
speed of my applications and the loading of webpages. These are inexact,
but for a personal computer at my level of involvement seem good enough. I
am a bit cavalier about issues as a fresh install(after the issues has been
addressed) can remedy any severe issues and I don't have my machine too
heavily tweaked that I cannot start over again. I will eat my words if I do
lose some files I have failed to back up recently, but that's the extent of
my vulnerability.
I do also try to read up on "Gnu/Linux news" as a topic several times a
week. When an issue hits I will look for the remedy being developed or
implemented in a timely way. This one could be tricky, since it is in the
kernel. It is also a kernel piece that has been retained over a long
period. I will look at the release dates for the 5.14 and 6.6 kernels to
see how long. Hang in there and don't fret. Thank you, Ted P

On Sun, Jun 2, 2024 at 2:05=E2=80=AFPM Brian O'Keefe <[email protected]>=
 wrote:

> Is this a problem for someone like me? Are folks aware of it?
>
> $ uname -r
> 5.4.0-182-generic
>
>
>
> https://arstechnica.com/security/2024/05/federal-agency-warns-critical-li=
nux-vulnerability-being-actively-exploited/?comments=3D1&comments-page=3D1
> --
> _______________________________________________
> nmglug mailing list
> [email protected]
> http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org
>

--000000000000f750f3061a01915c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-size:large">Bri=
an, Probably not at all. Note the breadth of the problem and the level. It =
affects a broad range of kernels, and will be attended to by the people who=
 can address this at the kernel level. Keep an eye on updates, that is do t=
hem regularly, but no need to panic. I am assuming you are not running the =
servers for Cisco or AWS, just doing personal business on your machine. You=
 do turn it off at night?</div><div class=3D"gmail_default" style=3D"font-s=
ize:large">I usually like to be aware of the issues, but have confidence in=
 the people at the kernel and OS levels who can address any issue, whether =
in the kernel, the OS or any application I am likely to use. I also try to =
be aware of my system&#39;s usual behaviors: amount of ram and cpu in norma=
l use, speed of my applications and the loading of webpages. These are inex=
act, but for a personal computer at my level of involvement seem good enoug=
h. I am a bit cavalier about issues as a fresh install(after the issues has=
 been addressed) can remedy any severe issues and I don&#39;t have my machi=
ne too heavily tweaked that I cannot start over again. I will eat my words =
if I do lose some files I have failed to back up recently, but that&#39;s t=
he extent of my vulnerability. <br></div><div class=3D"gmail_default" style=
=3D"font-size:large">I do also try to read up on &quot;Gnu/Linux news&quot;=
 as a topic several times a week. When an issue hits I will look for the re=
medy being developed or implemented in a timely way. This one could be tric=
ky, since it is in the kernel. It is also a kernel piece that has been reta=
ined over a long period. I will look at the release dates for the 5.14 and =
6.6 kernels to see how long. Hang in there and don&#39;t fret. Thank you, T=
ed P<br></div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=
=3D"gmail_attr">On Sun, Jun 2, 2024 at 2:05=E2=80=AFPM Brian O&#39;Keefe &l=
t;<a href=3D"mailto:[email protected]">[email protected]</a>&gt; wrot=
e:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0=
.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><u></u>

 =20

   =20
 =20
  <div>
    <p>Is this a problem for someone like me? Are folks aware of it?<br>
    </p>
    <p>$ uname -r<br>
      5.4.0-182-generic<br>
    </p>
    <p><br>
    </p>
<a href=3D"https://arstechnica.com/security/2024/05/federal-agency-warns-cr=
itical-linux-vulnerability-being-actively-exploited/?comments=3D1&amp;comme=
nts-page=3D1" target=3D"_blank">https://arstechnica.com/security/2024/05/fe=
deral-agency-warns-critical-linux-vulnerability-being-actively-exploited/?c=
omments=3D1&amp;comments-page=3D1</a>
    <div>-- <br>
      <img src=3D"cid:ii_18fdf94c5d261a917f31" border=3D"0"></div>
  </div>
_______________________________________________<br>
nmglug mailing list<br>
<a href=3D"mailto:[email protected]" target=3D"_blank">[email protected]=
mglug.org</a><br>
<a href=3D"http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org" rel=3D"n=
oreferrer" target=3D"_blank">http://lists.nmglug.org/listinfo.cgi/nmglug-nm=
glug.org</a><br>
</blockquote></div>

--000000000000f750f3061a01915c--

--000000000000f750f5061a01915d
Content-Type: image/png; name="signature.png"
Content-Disposition: inline; filename="signature.png"
Content-Transfer-Encoding: base64
Content-ID: <ii_18fdf94c5d261a917f31>
X-Attachment-Id: ii_18fdf94c5d261a917f31
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--000000000000f750f5061a01915d--

--===============2157634363425059704==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
nmglug mailing list
[email protected]
http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org

--===============2157634363425059704==--