Re: Federal agency warns critical Linux vulnerability being actively exploited | Ars Technica
Ted Pomeroy <[email protected]> Mon, 3 Jun 2024 13:48:04 -0600
| Newsgroups | gmane.org.user-groups.linux.nmglug |
|---|---|
| Message-ID | <CAM7Qav9_konuKYtCvuKYAKwH4gMi-g0u=TbZvVxqOdYTgw-y+g@mail.gmail.com> |
--===============3543835355523890743== Content-Type: multipart/related; boundary="0000000000005015fa061a019d7f" --0000000000005015fa061a019d7f Content-Type: multipart/alternative; boundary="0000000000005015f8061a019d7e" --0000000000005015f8061a019d7e Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Brian and all, Linux kernel 5.14 release August 2021, and kernel 6.6 released October 2023. I am not sure what that means for the news and issues involved. Ted P On Mon, Jun 3, 2024 at 1:44=E2=80=AFPM Ted Pomeroy <[email protected]> wro= te: > Brian, Probably not at all. Note the breadth of the problem and the level= . > It affects a broad range of kernels, and will be attended to by the peopl= e > who can address this at the kernel level. Keep an eye on updates, that is > do them regularly, but no need to panic. I am assuming you are not runnin= g > the servers for Cisco or AWS, just doing personal business on your machin= e. > You do turn it off at night? > I usually like to be aware of the issues, but have confidence in the > people at the kernel and OS levels who can address any issue, whether in > the kernel, the OS or any application I am likely to use. I also try to b= e > aware of my system's usual behaviors: amount of ram and cpu in normal use= , > speed of my applications and the loading of webpages. These are inexact, > but for a personal computer at my level of involvement seem good enough. = I > am a bit cavalier about issues as a fresh install(after the issues has be= en > addressed) can remedy any severe issues and I don't have my machine too > heavily tweaked that I cannot start over again. I will eat my words if I = do > lose some files I have failed to back up recently, but that's the extent = of > my vulnerability. > I do also try to read up on "Gnu/Linux news" as a topic several times a > week. When an issue hits I will look for the remedy being developed or > implemented in a timely way. This one could be tricky, since it is in the > kernel. It is also a kernel piece that has been retained over a long > period. I will look at the release dates for the 5.14 and 6.6 kernels to > see how long. Hang in there and don't fret. Thank you, Ted P > > On Sun, Jun 2, 2024 at 2:05=E2=80=AFPM Brian O'Keefe <[email protected]= m> wrote: > >> Is this a problem for someone like me? Are folks aware of it? >> >> $ uname -r >> 5.4.0-182-generic >> >> >> >> https://arstechnica.com/security/2024/05/federal-agency-warns-critical-l= inux-vulnerability-being-actively-exploited/?comments=3D1&comments-page=3D1 >> -- >> _______________________________________________ >> nmglug mailing list >> [email protected] >> http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org >> > --0000000000005015f8061a019d7e Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-size:large">Bri= an and all, Linux kernel 5.14 release August 2021, and kernel 6.6 released = October 2023. I am not sure what that means for the news and issues involve= d. Ted P<br></div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" cla= ss=3D"gmail_attr">On Mon, Jun 3, 2024 at 1:44=E2=80=AFPM Ted Pomeroy <<a= href=3D"mailto:[email protected]">[email protected]</a>> wrote:<br></= div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bor= der-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div= class=3D"gmail_default" style=3D"font-size:large">Brian, Probably not at a= ll. Note the breadth of the problem and the level. It affects a broad range= of kernels, and will be attended to by the people who can address this at = the kernel level. Keep an eye on updates, that is do them regularly, but no= need to panic. I am assuming you are not running the servers for Cisco or = AWS, just doing personal business on your machine. You do turn it off at ni= ght?</div><div class=3D"gmail_default" style=3D"font-size:large">I usually = like to be aware of the issues, but have confidence in the people at the ke= rnel and OS levels who can address any issue, whether in the kernel, the OS= or any application I am likely to use. I also try to be aware of my system= 's usual behaviors: amount of ram and cpu in normal use, speed of my ap= plications and the loading of webpages. These are inexact, but for a person= al computer at my level of involvement seem good enough. I am a bit cavalie= r about issues as a fresh install(after the issues has been addressed) can = remedy any severe issues and I don't have my machine too heavily tweake= d that I cannot start over again. I will eat my words if I do lose some fil= es I have failed to back up recently, but that's the extent of my vulne= rability. <br></div><div class=3D"gmail_default" style=3D"font-size:large">= I do also try to read up on "Gnu/Linux news" as a topic several t= imes a week. When an issue hits I will look for the remedy being developed = or implemented in a timely way. This one could be tricky, since it is in th= e kernel. It is also a kernel piece that has been retained over a long peri= od. I will look at the release dates for the 5.14 and 6.6 kernels to see ho= w long. Hang in there and don't fret. Thank you, Ted P<br></div></div><= br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Sun,= Jun 2, 2024 at 2:05=E2=80=AFPM Brian O'Keefe <<a href=3D"mailto:oke= [email protected]" target=3D"_blank">[email protected]</a>> wrote:<br= ></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;= border-left:1px solid rgb(204,204,204);padding-left:1ex"><u></u> =20 =20 =20 <div> <p>Is this a problem for someone like me? Are folks aware of it?<br> </p> <p>$ uname -r<br> 5.4.0-182-generic<br> </p> <p><br> </p> <a href=3D"https://arstechnica.com/security/2024/05/federal-agency-warns-cr= itical-linux-vulnerability-being-actively-exploited/?comments=3D1&comme= nts-page=3D1" target=3D"_blank">https://arstechnica.com/security/2024/05/fe= deral-agency-warns-critical-linux-vulnerability-being-actively-exploited/?c= omments=3D1&comments-page=3D1</a> <div>-- <br> <img src=3D"cid:ii_18fdf94c5d261a917f31" border=3D"0"></div> </div> _______________________________________________<br> nmglug mailing list<br> <a href=3D"mailto:[email protected]" target=3D"_blank">[email protected]= mglug.org</a><br> <a href=3D"http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org" rel=3D"n= oreferrer" target=3D"_blank">http://lists.nmglug.org/listinfo.cgi/nmglug-nm= glug.org</a><br> </blockquote></div> </blockquote></div> --0000000000005015f8061a019d7e-- --0000000000005015fa061a019d7f Content-Type: image/png; name="signature.png" Content-Disposition: inline; filename="signature.png" Content-Transfer-Encoding: base64 Content-ID: <ii_18fdf94c5d261a917f31> X-Attachment-Id: ii_18fdf94c5d261a917f31 iVBORw0KGgoAAAANSUhEUgAAANAAAACCCAIAAAC4gNHfAAAABmJLR0QA/wD/AP+gvaeTAAAACXBI WXMAAAsTAAALEwEAmpwYAAAAB3RJTUUH4wUYEwIkERyo9gAAAB1pVFh0Q29tbWVudAAAAAAAQ3Jl YXRlZCB3aXRoIEdJTVBkLmUHAAAOrUlEQVR42u2de1CU5RfHzy67yHIXuQhKIkHAQIpll0FD8II7 hKExjFOUFEKmlqM2kJOCiP1heWsmLzUTNlqRF6SMAMlCCoboQgESICSjcVFgL7CwC+yy+/7+OL/e 2bise9VFzuev5d3nBs+X532fc85zXg7DMEAQ9wou/QkIEhxBgiMIEhxBgiMIEhxBgiNIcARBgiNI cARBgiNIcARBgiNIcAQJjiBIcAQJjiBIcAQJjiCmjODw1EVUVBTnvwQEBBw4cEAikWg0GprIqQLH yg/RDA4OJiUlffPNNzrKPPnkk/Hx8YmJiYGBgQzDcDgcmlcSnDE0NTWFh4crlUo7O7vIyMjY2Fh2 tBwO5/r163l5eaOjo3K5HC+++uqrubm5JDhrv2FZJ2fPnsURenp6NjQ0TFaso6Pj888/X7BgARb2 9va+ePEiQ1grViq4+vp6XKiEQqGeVVpbW/38/FB27733Hk0tCU5f5HK5QCAAgDVr1hhUcWRkZP/+ /ai59PR0ml0SnF4sXboUAFxcXIyrnp6ejpo7c+YMTbC1YV2bBoZhhoaGHBwcHB0d//jjj8DAQOPa OXToEMqOElmQHU7nnpnDiYuLA4CIiAij1QYA27ZtmzdvHu5baY7JLDIpVVVVS5YsMcvKJJPJXFxc 7O3tm5ubfX19aaZphZuAK1euAEB4eLjpTTk5Oa1cuVKhULDmFYLscP9hdHQUzWkFBQVmabC0tNTK bY3TEK5VSf+ff/7h8XizZ882S4MxMTEuLi4A8MILL9DKQrfUsajV6r6+Pj6f7+XlZa4209LSAOD3 33+nmSbBjeXjjz8GAIFA4O/vb642s7KyAEAkEnV2dtJkk+D+Q09PD1pGzNimUqnENrlcivwjwREk uPvI8PAwANjZ2ZmxTVwv/+/FI0hw2hw/fhwAXn/9dTO2+emnnwKAq6urj48PTTYJboIVztHR0Yxt 4l6Bz+fTTJPg7gUzZsxgpUyQ4CzOgQMHACAnJ4dmmgQ3Mba2tuZqqqqqCj+88sorNNMkuLG8++67 AJCRkWGuBr/++msAWLVqFU0zCW4ChoaGwHxmEbVanZuba2Njs3fvXppmEtwELFu2DABUKtXg4KDp rWVlZUkkkkceeQQD7AgrwYoCMFUqla2trUAgaGhoMNGd2t3djSEntbW1CxcupGmmFW4i7XM4np6e SqXSdEf7G2+8AQAxMTGkNhKcLsF5eXmp1WqJRGJKO6Wlpfn5+VwuF10XBAnOgohEoqSkJADIyckJ CAiwXEfknH0QVjg8/yyTyYzemW7ZskUsFgcEBOzevdsSIvvxxx99fX0xfROpZ2oLjsvlPv744wBw /vx541pIT0+/cOEC/GuBMztSqTQqKqqjo8O8Dt9pBc+qRjNz5kwAEIvFRtQ9derU0aNHAaCxsTEk JAQvyuXy1tbW27dvnz592sbGBi9qNJq1a9c+88wzhoaQODo6xsXFdXZ2XrlyhfKCGX+bsB4uX75s 3KgwlBwAdu3axV6Mj4/38fGZLNbXxcUFdWMQKpVKqVTS4asHJNUDANja2qpUqpycnMzMTP3Xto0b NwLAnj179u3b9+2335aWlp44cQK/9fDwcHd3Dw4OZhNlcjicxsbGlpYWABgaGjJvyCcxlVY4hmE2 b94MACEhIXqWZz1XL730kq+vr/bTVURERFFRkVwuHx4eHl8xIiICANzc3AYGBmjhmb7Zk3799VcA 8PLy6uvru2vhxsZGjHjTJjQ0NDExsby8XHfdzs7OOXPmAMCJEydIB9NXcAqFAv1a1dXVd1XMGKlt 27atubl5dHTUoCe/mJgY0sH0FZxGo1mxYgXozCh4586dt99+m42cW7FixcmTJ2/dumVoX9XV1db5 XEGCu6dggK6/v/+E3xYXF7u6urIbgt7eXpN+fwAAOHz4MElh2uUWYdm6dSsAtLW11dfXa1/v6elJ Tk6OjY3t6+sDgKVLl3Z2drq7u5ve4/gHQWIa+VLd3NzwA5sTZHh4uLy83MvL68yZM3hl48aNFRUV ph/Hwtt3cXExSWGamkWQI0eOAEBYWBh+Dg4O1h5zfn6+uTrCfcPMmTP1LH/x4sVLly5dvnxZKBTG xcUdPXqU7pJT/hmOYZhbt24BgIODw5iAtgULFpi3I/Txz5o1S0eZ7u7u5uZmHX6wqqoqHXVb/kUs FuszpL6+PraKPrYhEpwZNqpqtXru3Llj5vXgwYMqlcq8fWVnZ8PkGdMPHjy4ZMkSdo+iTUpKyoYN G9ivtm7dOr76unXrtOs6Ozs3NTXpGIxcLo+Ojtb+xWfPnp2VlUWCsyxisZh9jEP8/f2Li4st0Rfe rFNTU7Uv1tTUjDl64+Pjs3v37glTc+7ZswfLtLa2shdLSkrYLHc+Pj7e3t5oZNbxDLNz5062O+9/ 4fF4M2bM6O7uJsFZisrKyjFHU7dv3z40NGSp3x8AAD744AP8saCgQDv/Jo/HS0lJ6erqkkqlOhpJ Tk4GgE2bNuGPCQkJGJni5ubW29srlUqlUung4ODTTz8NE70lp7e3l/0He/HFF69evSqRSKRSqVgs jo6OxqWdBGcRSkpKQCtFHGYfj4qK0mg0luhuZGQEO8rLyzt16hQGRwHAnDlzIiMjv/jiC/YWf9ed BIfD8fPzGxgYWL58OQDw+fyEhIQxdXFHnJ2drV23vb3dyckJvXlFRUVjWkbP8rPPPkuCMz9qtVp7 YTty5MjNmzednZ0xBtgSPf78889sqBLb7/HjxxUKhVqt1r+duro6XNJwtABQUlIyvoXxguvt7cXy Dz30kEQiGd/ypk2bACA+Pp4Mv+bn2rVrALBw4cL4+PiampodO3bMmzcPFwycKvMik8kwSz8A9Pf3 L168GF+VtGXLFoFAYFDGzEcffRTLy2QyX1/fvr4+oVA4vgUUJRsl1dXVhU+QYWFhLS0t7PpqKBKJ JC0tzd3d3cbGJjc3l+xwBqBUKkdHR8fcwnCcd43+MIjvvvuONRrPnTu3srLSlNb6+/t5PB5GyYtE osmKoWEFZc2ubV5eXjrio1577TUAWLt27WQFzp07x0YyA8DJkyfplmoq6FoVCoVmeZJrampi10sM njM9WgRzpcPdXpuJZWpqaioqKvBzeHi47v3Q999/jyVHRka0r9fW1m7fvt3T01N7H3316lV6hjMD bW1teJrL9L0qniBEsrOzMZnXqlWrTGlzzZo1+liAMc4PAP766y/88Pzzz+vzbIqFk5KSGIa5ceNG Zmbmww8/zIYu83g8Ho+3c+dO2jSYk8TERAAIDg42ZWF74okncJJSU1Pb2toYhlm8eDEAfPLJJ0Y3 W1hYqP2spqPkoUOHsExkZCSubfr/v034LLR+/frCwsKBgQHdJhsSnEkGs59++snQihqNpq6uDmVh Z2en7f1Ew9hHH31k9KjQuhscHKydvXpC8EQZYmdnZ9BqXVZWZm9vz+PxHB0dXV1d09LSyCxiceLj 4wEgIyPDIKkxDLNjxw6c5qioqJ6eHu0Ctra2XC7XuO3I6OhoVFQUWnfz8/PZUIPJKCoqwmF4enr+ 8ssvRvRYXV19584dssPdI3744QcOh2Nvb2+QXXf9+vU4zRMqFU0VdXV1RoynsrISd6ZqtRo3DSkp KbqrvPzyy3R+YipFV6N0Lly4oOfaFhoailXOnj07vszp06fRJWDESMRiMfrf0J2FvVjI20uCu29g Ggd9bIfDw8N+fn4Y6NbR0TFhmV27duEN0YiR4OsJPTw8GIYpKCgAAIFAIJfLSU8PlODYRQttpzrW Nkz14ODgoGMHh26ozMxMQ8fQ29vr7OzM5/P//vtvhmEwDGTC8CRiPFMsXdfq1asB4KuvvtLhOAkI CGhqanJxcamtrdV2kmqjUqkwpbARGQsPHz4sk8kiIiLmz59fX1/f09PD5XKPHTvGUAKvqRtiPhkd HR047MkiGd955x0AcHJy0n2Du3btGnqEjH6UzM3NZVfc5ORkWroezFsqwzAJCQmTGU4rKytRDZcu XdLdyJdffsnhcAIDAw3tHV/qikrNy8sDAHt7+/b2dlLSAys4vBUKBAL0FrAMDg5iPLc+tjrUzVNP PWVo7+vWrUMrf3t7O2bBOX/+PMnoQRacRqMRCoUAkJOTo3193759ABAUFKRPI+i/37t3r0Fdy+Vy 3PzW1NTgOrds2TKDIueIKZnloLy8HOdb22ZrUBQTFjbU4q9QKFjHuSWOkJHgrJcNGzYAQGBgIG4O 0PEVERGhT91z586xMZjGCQ59Hi0tLSSg6SI4uVzu4eGBwdllZWVoDBt/JmBCYmNjAWD58uWGdqpQ KNjM6F1dXaSeaSQ4hmFu376Nx08wb6aHh4c+tn6RSGRvb49xaUZ0un///qCgIFrbjMbqUq4aZEHk cDgZGRlDQ0PHjh0LCQn5888/75qWpqKiIjo6etasWZ2dneh9J6Z7Mhs9wRC0999/H99cExwcrE8S pN9++02tVoeFhRl0TIYgwY2FPQ2lG4xLCw8PJ8GR4IwED7TqKaCysjLcMdDck+CMBI+x3Lx5U6lU 3vUBDj9Y4qArMV0EFx4ezufz29raVCqV7pL4WsvU1FR6NwMJznhCQ0M9PDz6+/s/++wzHcX6+/u7 u7sBAE8XEyQ448GcWZj6ZTKuX7/e3d09f/78sLAwmngSnEls3rwZT+x9+OGHk5XBBGwrV67EY9XE fWEKG37HUFhY+Nxzzzk7O4tEovHJppubmzHuvKOjg80NSNAKZzxCodDGxkYmk8XFxUml0jHf4nn3 N998k9RGK5zZaGlpCQoKws9vvfXW6tWrH3vssfb29kWLFgGAn59fQ0ODg4MDzfr95AHzDbe2tmIM +hgWLVp048YN8p2T894itLW1xcTEKBQKTOGRlpaGaXLpHc50S7Ugg4ODMpmMz+dj5BxBgiNol0oQ JDiCBEcQJDiCBEcQJDiCBEeQ4AiCBEeQ4AiCBEeQ4AiCBEeQ4AgSHEGQ4AgSHEGQ4AgSHEGCIwgS HEGCIwgSHEGCIwgSHHG/+R87RpMZ3KibnwAAAABJRU5ErkJggg== --0000000000005015fa061a019d7f-- --===============3543835355523890743== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ nmglug mailing list [email protected] http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org --===============3543835355523890743==--