Re: Federal agency warns critical Linux vulnerability being actively exploited | Ars Technica
Brian O'Keefe <[email protected]> Mon, 3 Jun 2024 17:11:39 -0600
| Newsgroups | gmane.org.user-groups.linux.nmglug |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. --===============2975300182857165116== Content-Type: multipart/alternative; boundary="------------moCPu04f02lPWaRIfsI0r2NI" Content-Language: en-US This is a multi-part message in MIME format. --------------moCPu04f02lPWaRIfsI0r2NI Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Thanks Ted. You've put me at ease! Brian On 6/3/24 01:44PM, Ted Pomeroy wrote: > Brian, Probably not at all. Note the breadth of the problem and the > level. It affects a broad range of kernels, and will be attended to by > the people who can address this at the kernel level. Keep an eye on > updates, that is do them regularly, but no need to panic. I am > assuming you are not running the servers for Cisco or AWS, just doing > personal business on your machine. You do turn it off at night? > I usually like to be aware of the issues, but have confidence in the > people at the kernel and OS levels who can address any issue, whether > in the kernel, the OS or any application I am likely to use. I also > try to be aware of my system's usual behaviors: amount of ram and cpu > in normal use, speed of my applications and the loading of webpages. > These are inexact, but for a personal computer at my level of > involvement seem good enough. I am a bit cavalier about issues as a > fresh install(after the issues has been addressed) can remedy any > severe issues and I don't have my machine too heavily tweaked that I > cannot start over again. I will eat my words if I do lose some files I > have failed to back up recently, but that's the extent of my > vulnerability. > I do also try to read up on "Gnu/Linux news" as a topic several times > a week. When an issue hits I will look for the remedy being developed > or implemented in a timely way. This one could be tricky, since it is > in the kernel. It is also a kernel piece that has been retained over a > long period. I will look at the release dates for the 5.14 and 6.6 > kernels to see how long. Hang in there and don't fret. Thank you, Ted P > > On Sun, Jun 2, 2024 at 2:05 PM Brian O'Keefe <[email protected]> wrote: > > Is this a problem for someone like me? Are folks aware of it? > > $ uname -r > 5.4.0-182-generic > > > https://arstechnica.com/security/2024/05/federal-agency-warns-critical-linux-vulnerability-being-actively-exploited/?comments=1&comments-page=1 > <https://arstechnica.com/security/2024/05/federal-agency-warns-critical-linux-vulnerability-being-actively-exploited/?comments=1&comments-page=1> > > -- > _______________________________________________ > nmglug mailing list > [email protected] > http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org > -- --------------moCPu04f02lPWaRIfsI0r2NI Content-Type: multipart/related; boundary="------------oNwMTFnhA7ErM8KQiGFKTd7h" --------------oNwMTFnhA7ErM8KQiGFKTd7h Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit <!DOCTYPE html> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> </head> <body> <p>Thanks Ted. You've put me at ease!</p> <p>Brian<br> </p> <div class="moz-cite-prefix">On 6/3/24 01:44PM, Ted Pomeroy wrote:<br> </div> <blockquote type="cite" cite="mid:CAM7Qav8GZmFMiJ1vKCAH9404DnBDiDzSScKfra4eS5BhGbX70Q-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <div dir="ltr"> <div class="gmail_default" style="font-size:large">Brian, Probably not at all. Note the breadth of the problem and the level. It affects a broad range of kernels, and will be attended to by the people who can address this at the kernel level. Keep an eye on updates, that is do them regularly, but no need to panic. I am assuming you are not running the servers for Cisco or AWS, just doing personal business on your machine. You do turn it off at night?</div> <div class="gmail_default" style="font-size:large">I usually like to be aware of the issues, but have confidence in the people at the kernel and OS levels who can address any issue, whether in the kernel, the OS or any application I am likely to use. I also try to be aware of my system's usual behaviors: amount of ram and cpu in normal use, speed of my applications and the loading of webpages. These are inexact, but for a personal computer at my level of involvement seem good enough. I am a bit cavalier about issues as a fresh install(after the issues has been addressed) can remedy any severe issues and I don't have my machine too heavily tweaked that I cannot start over again. I will eat my words if I do lose some files I have failed to back up recently, but that's the extent of my vulnerability. <br> </div> <div class="gmail_default" style="font-size:large">I do also try to read up on "Gnu/Linux news" as a topic several times a week. When an issue hits I will look for the remedy being developed or implemented in a timely way. This one could be tricky, since it is in the kernel. It is also a kernel piece that has been retained over a long period. I will look at the release dates for the 5.14 and 6.6 kernels to see how long. Hang in there and don't fret. Thank you, Ted P<br> </div> </div> <br> <div class="gmail_quote"> <div dir="ltr" class="gmail_attr">On Sun, Jun 2, 2024 at 2:05 PM Brian O'Keefe <<a href="mailto:[email protected]" moz-do-not-send="true" class="moz-txt-link-freetext">[email protected]</a>> wrote:<br> </div> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <div> <p>Is this a problem for someone like me? Are folks aware of it?<br> </p> <p>$ uname -r<br> 5.4.0-182-generic<br> </p> <p><br> </p> <a href="https://arstechnica.com/security/2024/05/federal-agency-warns-critical-linux-vulnerability-being-actively-exploited/?comments=1&comments-page=1" target="_blank" moz-do-not-send="true">https://arstechnica.com/security/2024/05/federal-agency-warns-critical-linux-vulnerability-being-actively-exploited/?comments=1&comments-page=1</a> <div>-- <br> <img src="cid:[email protected]" class="" border="0"></div> </div> _______________________________________________<br> nmglug mailing list<br> <a href="mailto:[email protected]" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">[email protected]</a><br> <a href="http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org" rel="noreferrer" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org</a><br> </blockquote> </div> </blockquote> <div class="moz-signature">-- <br> <img src="cid:[email protected]" border="0"></div> </body> </html> --------------oNwMTFnhA7ErM8KQiGFKTd7h Content-Type: image/png; name="signature.png" Content-Disposition: inline; filename="signature.png" Content-Id: <[email protected]> Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAANAAAACCCAIAAAC4gNHfAAAABmJLR0QA/wD/AP+gvaeTAAAA CXBIWXMAAAsTAAALEwEAmpwYAAAAB3RJTUUH4wUYEwIkERyo9gAAAB1pVFh0Q29tbWVudAAA AAAAQ3JlYXRlZCB3aXRoIEdJTVBkLmUHAAAOrUlEQVR42u2de1CU5RfHzy67yHIXuQhKIkHA QIpll0FD8II7hKExjFOUFEKmlqM2kJOCiP1heWsmLzUTNlqRF6SMAMlCCoboQgESICSjcVFg L7CwC+yy+/7+OL/e2bise9VFzuev5d3nBs+X532fc85zXg7DMEAQ9wou/QkIEhxBgiMIEhxB giMIEhxBgiNIcARBgiNIcARBgiNIcARBgiNIcAQJjiBIcAQJjiBIcAQJjiCmjODw1EVUVBTn vwQEBBw4cEAikWg0GprIqQLHyg/RDA4OJiUlffPNNzrKPPnkk/Hx8YmJiYGBgQzDcDgcmlcS nDE0NTWFh4crlUo7O7vIyMjY2Fh2tBwO5/r163l5eaOjo3K5HC+++uqrubm5JDhrv2FZJ2fP nsURenp6NjQ0TFaso6Pj888/X7BgARb29va+ePEiQ1grViq4+vp6XKiEQqGeVVpbW/38/FB2 7733Hk0tCU5f5HK5QCAAgDVr1hhUcWRkZP/+/ai59PR0ml0SnF4sXboUAFxcXIyrnp6ejpo7 c+YMTbC1YV2bBoZhhoaGHBwcHB0d//jjj8DAQOPaOXToEMqOElmQHU7nnpnDiYuLA4CIiAij 1QYA27ZtmzdvHu5baY7JLDIpVVVVS5YsMcvKJJPJXFxc7O3tm5ubfX19aaZphZuAK1euAEB4 eLjpTTk5Oa1cuVKhULDmFYLscP9hdHQUzWkFBQVmabC0tNTKbY3TEK5VSf+ff/7h8XizZ882 S4MxMTEuLi4A8MILL9DKQrfUsajV6r6+Pj6f7+XlZa4209LSAOD333+nmSbBjeXjjz8GAIFA 4O/vb642s7KyAEAkEnV2dtJkk+D+Q09PD1pGzNimUqnENrlcivwjwREkuPvI8PAwANjZ2Zmx TVwv/+/FI0hw2hw/fhwAXn/9dTO2+emnnwKAq6urj48PTTYJboIVztHR0Yxt4l6Bz+fTTJPg 7gUzZsxgpUyQ4CzOgQMHACAnJ4dmmgQ3Mba2tuZqqqqqCj+88sorNNMkuLG8++67AJCRkWGu Br/++msAWLVqFU0zCW4ChoaGwHxmEbVanZuba2Njs3fvXppmEtwELFu2DABUKtXg4KDprWVl ZUkkkkceeQQD7AgrwYoCMFUqla2trUAgaGhoMNGd2t3djSEntbW1CxcupGmmFW4i7XM4np6e SqXSdEf7G2+8AQAxMTGkNhKcLsF5eXmp1WqJRGJKO6Wlpfn5+VwuF10XBAnOgohEoqSkJADI yckJCAiwXEfknH0QVjg8/yyTyYzemW7ZskUsFgcEBOzevdsSIvvxxx99fX0xfROpZ2oLjsvl Pv744wBw/vx541pIT0+/cOEC/GuBMztSqTQqKqqjo8O8Dt9pBc+qRjNz5kwAEIvFRtQ9derU 0aNHAaCxsTEkJAQvyuXy1tbW27dvnz592sbGBi9qNJq1a9c+88wzhoaQODo6xsXFdXZ2Xrly hfKCGX+bsB4uX75s3KgwlBwAdu3axV6Mj4/38fGZLNbXxcUFdWMQKpVKqVTS4asHJNUDANja 2qpUqpycnMzMTP3Xto0bNwLAnj179u3b9+2335aWlp44cQK/9fDwcHd3Dw4OZhNlcjicxsbG lpYWABgaGjJvyCcxlVY4hmE2b94MACEhIXqWZz1XL730kq+vr/bTVURERFFRkVwuHx4eHl8x IiICANzc3AYGBmjhmb7Zk3799VcA8PLy6uvru2vhxsZGjHjTJjQ0NDExsby8XHfdzs7OOXPm AMCJEydIB9NXcAqFAv1a1dXVd1XMGKlt27atubl5dHTUoCe/mJgY0sH0FZxGo1mxYgXozCh4 586dt99+m42cW7FixcmTJ2/dumVoX9XV1db5XEGCu6dggK6/v/+E3xYXF7u6urIbgt7eXpN+ fwAAOHz4MElh2uUWYdm6dSsAtLW11dfXa1/v6elJTk6OjY3t6+sDgKVLl3Z2drq7u5ve4/gH QWIa+VLd3NzwA5sTZHh4uLy83MvL68yZM3hl48aNFRUVph/Hwtt3cXExSWGamkWQI0eOAEBY WBh+Dg4O1h5zfn6+uTrCfcPMmTP1LH/x4sVLly5dvnxZKBTGxcUdPXqU7pJT/hmOYZhbt24B gIODw5iAtgULFpi3I/Txz5o1S0eZ7u7u5uZmHX6wqqoqHXVb/kUsFuszpL6+PraKPrYhEpwZ NqpqtXru3Llj5vXgwYMqlcq8fWVnZ8PkGdMPHjy4ZMkSdo+iTUpKyoYNG9ivtm7dOr76unXr tOs6Ozs3NTXpGIxcLo+Ojtb+xWfPnp2VlUWCsyxisZh9jEP8/f2Li4st0RferFNTU7Uv1tTU jDl64+Pjs3v37glTc+7ZswfLtLa2shdLSkrYLHc+Pj7e3t5oZNbxDLNz5062O+9/4fF4M2bM 6O7uJsFZisrKyjFHU7dv3z40NGSp3x8AAD744AP8saCgQDv/Jo/HS0lJ6erqkkqlOhpJTk4G gE2bNuGPCQkJGJni5ubW29srlUqlUung4ODTTz8NE70lp7e3l/0He/HFF69evSqRSKRSqVgs jo6OxqWdBGcRSkpKQCtFHGYfj4qK0mg0luhuZGQEO8rLyzt16hQGRwHAnDlzIiMjv/jiC/YW f9edBIfD8fPzGxgYWL58OQDw+fyEhIQxdXFHnJ2drV23vb3dyckJvXlFRUVjWkbP8rPPPkuC Mz9qtVp7YTty5MjNmzednZ0xBtgSPf78889sqBLb7/HjxxUKhVqt1r+duro6XNJwtABQUlIy voXxguvt7cXyDz30kEQiGd/ypk2bACA+Pp4Mv+bn2rVrALBw4cL4+PiampodO3bMmzcPFwyc KvMik8kwSz8A9Pf3L168GF+VtGXLFoFAYFDGzEcffRTLy2QyX1/fvr4+oVA4vgUUJRsl1dXV hU+QYWFhLS0t7PpqKBKJJC0tzd3d3cbGJjc3l+xwBqBUKkdHR8fcwnCcd43+MIjvvvuONRrP nTu3srLSlNb6+/t5PB5GyYtEosmKoWEFZc2ubV5eXjrio1577TUAWLt27WQFzp07x0YyA8DJ kyfplmoq6FoVCoVmeZJrampi10sMnjM9WgRzpcPdXpuJZWpqaioqKvBzeHi47v3Q999/jyVH Rka0r9fW1m7fvt3T01N7H3316lV6hjMDbW1teJrL9L0qniBEsrOzMZnXqlWrTGlzzZo1+liA Mc4PAP766y/88Pzzz+vzbIqFk5KSGIa5ceNGZmbmww8/zIYu83g8Ho+3c+dO2jSYk8TERAAI Dg42ZWF74okncJJSU1Pb2toYhlm8eDEAfPLJJ0Y3W1hYqP2spqPkoUOHsExkZCSubfr/v034 LLR+/frCwsKBgQHdJhsSnEkGs59++snQihqNpq6uDmVhZ2en7f1Ew9hHH31k9KjQuhscHKyd vXpC8EQZYmdnZ9BqXVZWZm9vz+PxHB0dXV1d09LSyCxiceLj4wEgIyPDIKkxDLNjxw6c5qio qJ6eHu0Ctra2XC7XuO3I6OhoVFQUWnfz8/PZUIPJKCoqwmF4enr+8ssvRvRYXV19584dssPd I3744QcOh2Nvb2+QXXf9+vU4zRMqFU0VdXV1RoynsrISd6ZqtRo3DSkpKbqrvPzyy3R+YipF V6N0Lly4oOfaFhoailXOnj07vszp06fRJWDESMRiMfrf0J2FvVjI20uCu29gGgd9bIfDw8N+ fn4Y6NbR0TFhmV27duEN0YiR4OsJPTw8GIYpKCgAAIFAIJfLSU8PlODYRQttpzrWNkz14ODg oGMHh26ozMxMQ8fQ29vr7OzM5/P//vtvhmEwDGTC8CRiPFMsXdfq1asB4KuvvtLhOAkICGhq anJxcamtrdV2kmqjUqkwpbARGQsPHz4sk8kiIiLmz59fX1/f09PD5XKPHTvGUAKvqRtiPhkd HR047MkiGd955x0AcHJy0n2Du3btGnqEjH6UzM3NZVfc5ORkWroezFsqwzAJCQmTGU4rKytR DZcuXdLdyJdffsnhcAIDAw3tHV/qikrNy8sDAHt7+/b2dlLSAys4vBUKBAL0FrAMDg5iPLc+ tjrUzVNPPWVo7+vWrUMrf3t7O2bBOX/+PMnoQRacRqMRCoUAkJOTo3193759ABAUFKRPI+i/ 37t3r0Fdy+Vy3PzW1NTgOrds2TKDIueIKZnloLy8HOdb22ZrUBQTFjbU4q9QKFjHuSWOkJHg rJcNGzYAQGBgIG4O0PEVERGhT91z586xMZjGCQ59Hi0tLSSg6SI4uVzu4eGBwdllZWVoDBt/ JmBCYmNjAWD58uWGdqpQKNjM6F1dXaSeaSQ4hmFu376Nx08wb6aHh4c+tn6RSGRvb49xaUZ0 un///qCgIFrbjMbqUq4aZEHkcDgZGRlDQ0PHjh0LCQn5888/75qWpqKiIjo6etasWZ2dneh9 J6Z7Mhs9wRC0999/H99cExwcrE8SpN9++02tVoeFhRl0TIYgwY2FPQ2lG4xLCw8PJ8GR4IwE D7TqKaCysjLcMdDck+CMBI+x3Lx5U6lU3vUBDj9Y4qArMV0EFx4ezufz29raVCqV7pL4WsvU 1FR6NwMJznhCQ0M9PDz6+/s/++wzHcX6+/u7u7sBAE8XEyQ448GcWZj6ZTKuX7/e3d09f/78 sLAwmngSnEls3rwZT+x9+OGHk5XBBGwrV67EY9XEfWEKG37HUFhY+Nxzzzk7O4tEovHJppub mzHuvKOjg80NSNAKZzxCodDGxkYmk8XFxUml0jHf4nn3N998k9RGK5zZaGlpCQoKws9vvfXW 6tWrH3vssfb29kWLFgGAn59fQ0ODg4MDzfr95AHzDbe2tmIM+hgWLVp048YN8p2T894itLW1 xcTEKBQKTOGRlpaGaXLpHc50S7Ugg4ODMpmMz+dj5BxBgiNol0oQJDiCBEcQJDiCBEcQJDiC BEeQ4AiCBEeQ4AiCBEeQ4AiCBEeQ4AgSHEGQ4AgSHEGQ4AgSHEGCIwgSHEGCIwgSHEGCIwgS HHG/+R87RpMZ3KibnwAAAABJRU5ErkJggg== --------------oNwMTFnhA7ErM8KQiGFKTd7h-- --------------moCPu04f02lPWaRIfsI0r2NI-- --===============2975300182857165116== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ nmglug mailing list [email protected] http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org --===============2975300182857165116==--