Re: Federal agency warns critical Linux vulnerability being actively exploited | Ars Technica

Brian O'Keefe <[email protected]> Mon, 3 Jun 2024 17:14:15 -0600
Newsgroups	gmane.org.user-groups.linux.nmglug
Message-ID	<[email protected]>
This is a multi-part message in MIME format.
--===============2279403437165154726==
Content-Type: multipart/alternative;
 boundary="------------7V55iIDz9z4m6NziTI18ItLo"
Content-Language: en-US

This is a multi-part message in MIME format.
--------------7V55iIDz9z4m6NziTI18ItLo
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit

The newer kernels aren't in the repositories for Ubuntu 20.04 LTS

On 6/3/24 05:11PM, Brian O'Keefe wrote:
>
> Thanks Ted. You've put me at ease!
>
> Brian
>
> On 6/3/24 01:44PM, Ted Pomeroy wrote:
>> Brian, Probably not at all. Note the breadth of the problem and the 
>> level. It affects a broad range of kernels, and will be attended to 
>> by the people who can address this at the kernel level. Keep an eye 
>> on updates, that is do them regularly, but no need to panic. I am 
>> assuming you are not running the servers for Cisco or AWS, just doing 
>> personal business on your machine. You do turn it off at night?
>> I usually like to be aware of the issues, but have confidence in the 
>> people at the kernel and OS levels who can address any issue, whether 
>> in the kernel, the OS or any application I am likely to use. I also 
>> try to be aware of my system's usual behaviors: amount of ram and cpu 
>> in normal use, speed of my applications and the loading of webpages. 
>> These are inexact, but for a personal computer at my level of 
>> involvement seem good enough. I am a bit cavalier about issues as a 
>> fresh install(after the issues has been addressed) can remedy any 
>> severe issues and I don't have my machine too heavily tweaked that I 
>> cannot start over again. I will eat my words if I do lose some files 
>> I have failed to back up recently, but that's the extent of my 
>> vulnerability.
>> I do also try to read up on "Gnu/Linux news" as a topic several times 
>> a week. When an issue hits I will look for the remedy being developed 
>> or implemented in a timely way. This one could be tricky, since it is 
>> in the kernel. It is also a kernel piece that has been retained over 
>> a long period. I will look at the release dates for the 5.14 and 6.6 
>> kernels to see how long. Hang in there and don't fret. Thank you, Ted P
>>
>> On Sun, Jun 2, 2024 at 2:05 PM Brian O'Keefe <[email protected]> 
>> wrote:
>>
>>     Is this a problem for someone like me? Are folks aware of it?
>>
>>     $ uname -r
>>     5.4.0-182-generic
>>
>>
>>     https://arstechnica.com/security/2024/05/federal-agency-warns-critical-linux-vulnerability-being-actively-exploited/?comments=1&comments-page=1
>>     <https://arstechnica.com/security/2024/05/federal-agency-warns-critical-linux-vulnerability-being-actively-exploited/?comments=1&comments-page=1>
>>
>>     -- 
>>     _______________________________________________
>>     nmglug mailing list
>>     [email protected]
>>     http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org
>>
> -- 
>
> _______________________________________________
> nmglug mailing list
> [email protected]
> http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org
-- 
--------------7V55iIDz9z4m6NziTI18ItLo
Content-Type: multipart/related;
 boundary="------------02g4ed8YpZOFDaQZcQyFEO6b"

--------------02g4ed8YpZOFDaQZcQyFEO6b
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>The newer kernels aren't in the repositories for Ubuntu 20.04 LTS<br>
    </p>
    <div class="moz-cite-prefix">On 6/3/24 05:11PM, Brian O'Keefe wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:098a897a-b4c4-424d-8cf8-5cd10efb4771-NZlHNpfwZ0aB+jHODAdFcQ@public.gmane.org">
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      <p>Thanks Ted. You've put me at ease!</p>
      <p>Brian<br>
      </p>
      <div class="moz-cite-prefix">On 6/3/24 01:44PM, Ted Pomeroy wrote:<br>
      </div>
      <blockquote type="cite"
cite="mid:CAM7Qav8GZmFMiJ1vKCAH9404DnBDiDzSScKfra4eS5BhGbX70Q-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org">
        <meta http-equiv="content-type"
          content="text/html; charset=UTF-8">
        <div dir="ltr">
          <div class="gmail_default" style="font-size:large">Brian,
            Probably not at all. Note the breadth of the problem and the
            level. It affects a broad range of kernels, and will be
            attended to by the people who can address this at the kernel
            level. Keep an eye on updates, that is do them regularly,
            but no need to panic. I am assuming you are not running the
            servers for Cisco or AWS, just doing personal business on
            your machine. You do turn it off at night?</div>
          <div class="gmail_default" style="font-size:large">I usually
            like to be aware of the issues, but have confidence in the
            people at the kernel and OS levels who can address any
            issue, whether in the kernel, the OS or any application I am
            likely to use. I also try to be aware of my system's usual
            behaviors: amount of ram and cpu in normal use, speed of my
            applications and the loading of webpages. These are inexact,
            but for a personal computer at my level of involvement seem
            good enough. I am a bit cavalier about issues as a fresh
            install(after the issues has been addressed) can remedy any
            severe issues and I don't have my machine too heavily
            tweaked that I cannot start over again. I will eat my words
            if I do lose some files I have failed to back up recently,
            but that's the extent of my vulnerability. <br>
          </div>
          <div class="gmail_default" style="font-size:large">I do also
            try to read up on "Gnu/Linux news" as a topic several times
            a week. When an issue hits I will look for the remedy being
            developed or implemented in a timely way. This one could be
            tricky, since it is in the kernel. It is also a kernel piece
            that has been retained over a long period. I will look at
            the release dates for the 5.14 and 6.6 kernels to see how
            long. Hang in there and don't fret. Thank you, Ted P<br>
          </div>
        </div>
        <br>
        <div class="gmail_quote">
          <div dir="ltr" class="gmail_attr">On Sun, Jun 2, 2024 at
            2:05 PM Brian O'Keefe &lt;<a
              href="mailto:[email protected]" moz-do-not-send="true"
              class="moz-txt-link-freetext">[email protected]</a>&gt;
            wrote:<br>
          </div>
          <blockquote class="gmail_quote"
style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
            <div>
              <p>Is this a problem for someone like me? Are folks aware
                of it?<br>
              </p>
              <p>$ uname -r<br>
                5.4.0-182-generic<br>
              </p>
              <p><br>
              </p>
              <a
href="https://arstechnica.com/security/2024/05/federal-agency-warns-critical-linux-vulnerability-being-actively-exploited/?comments=1&amp;comments-page=1"
                target="_blank" moz-do-not-send="true">https://arstechnica.com/security/2024/05/federal-agency-warns-critical-linux-vulnerability-being-actively-exploited/?comments=1&amp;comments-page=1</a>
              <div>-- <br>
                <img src="cid:[email protected]"
                  class="" border="0"></div>
            </div>
            _______________________________________________<br>
            nmglug mailing list<br>
            <a href="mailto:[email protected]" target="_blank"
              moz-do-not-send="true" class="moz-txt-link-freetext">[email protected]</a><br>
            <a
href="http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org"
              rel="noreferrer" target="_blank" moz-do-not-send="true"
              class="moz-txt-link-freetext">http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org</a><br>
          </blockquote>
        </div>
      </blockquote>
      <div class="moz-signature">-- <br>
        <img src="cid:[email protected]" class=""
          border="0"></div>
      <br>
      <fieldset class="moz-mime-attachment-header"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
nmglug mailing list
<a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a>
<a class="moz-txt-link-freetext" href="http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org">http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org</a>
</pre>
    </blockquote>
    <div class="moz-signature">-- <br>
      <img src="cid:[email protected]" border="0"></div>
  </body>
</html>
--------------02g4ed8YpZOFDaQZcQyFEO6b
Content-Type: image/png; name="signature.png"
Content-Disposition: inline; filename="signature.png"
Content-Id: <[email protected]>
Content-Transfer-Encoding: base64

iVBORw0KGgoAAAANSUhEUgAAANAAAACCCAIAAAC4gNHfAAAABmJLR0QA/wD/AP+gvaeTAAAA
CXBIWXMAAAsTAAALEwEAmpwYAAAAB3RJTUUH4wUYEwIkERyo9gAAAB1pVFh0Q29tbWVudAAA
AAAAQ3JlYXRlZCB3aXRoIEdJTVBkLmUHAAAOrUlEQVR42u2de1CU5RfHzy67yHIXuQhKIkHA
QIpll0FD8II7hKExjFOUFEKmlqM2kJOCiP1heWsmLzUTNlqRF6SMAMlCCoboQgESICSjcVFg
L7CwC+yy+/7+OL/e2bise9VFzuev5d3nBs+X532fc85zXg7DMEAQ9wou/QkIEhxBgiMIEhxB
giMIEhxBgiNIcARBgiNIcARBgiNIcARBgiNIcAQJjiBIcAQJjiBIcAQJjiCmjODw1EVUVBTn
vwQEBBw4cEAikWg0GprIqQLHyg/RDA4OJiUlffPNNzrKPPnkk/Hx8YmJiYGBgQzDcDgcmlcS
nDE0NTWFh4crlUo7O7vIyMjY2Fh2tBwO5/r163l5eaOjo3K5HC+++uqrubm5JDhrv2FZJ2fP
nsURenp6NjQ0TFaso6Pj888/X7BgARb29va+ePEiQ1grViq4+vp6XKiEQqGeVVpbW/38/FB2
7733Hk0tCU5f5HK5QCAAgDVr1hhUcWRkZP/+/ai59PR0ml0SnF4sXboUAFxcXIyrnp6ejpo7
c+YMTbC1YV2bBoZhhoaGHBwcHB0d//jjj8DAQOPaOXToEMqOElmQHU7nnpnDiYuLA4CIiAij
1QYA27ZtmzdvHu5baY7JLDIpVVVVS5YsMcvKJJPJXFxc7O3tm5ubfX19aaZphZuAK1euAEB4
eLjpTTk5Oa1cuVKhULDmFYLscP9hdHQUzWkFBQVmabC0tNTKbY3TEK5VSf+ff/7h8XizZ882
S4MxMTEuLi4A8MILL9DKQrfUsajV6r6+Pj6f7+XlZa4209LSAOD333+nmSbBjeXjjz8GAIFA
4O/vb642s7KyAEAkEnV2dtJkk+D+Q09PD1pGzNimUqnENrlcivwjwREkuPvI8PAwANjZ2Zmx
TVwv/+/FI0hw2hw/fhwAXn/9dTO2+emnnwKAq6urj48PTTYJboIVztHR0Yxt4l6Bz+fTTJPg
7gUzZsxgpUyQ4CzOgQMHACAnJ4dmmgQ3Mba2tuZqqqqqCj+88sorNNMkuLG8++67AJCRkWGu
Br/++msAWLVqFU0zCW4ChoaGwHxmEbVanZuba2Njs3fvXppmEtwELFu2DABUKtXg4KDprWVl
ZUkkkkceeQQD7AgrwYoCMFUqla2trUAgaGhoMNGd2t3djSEntbW1CxcupGmmFW4i7XM4np6e
SqXSdEf7G2+8AQAxMTGkNhKcLsF5eXmp1WqJRGJKO6Wlpfn5+VwuF10XBAnOgohEoqSkJADI
yckJCAiwXEfknH0QVjg8/yyTyYzemW7ZskUsFgcEBOzevdsSIvvxxx99fX0xfROpZ2oLjsvl
Pv744wBw/vx541pIT0+/cOEC/GuBMztSqTQqKqqjo8O8Dt9pBc+qRjNz5kwAEIvFRtQ9derU
0aNHAaCxsTEkJAQvyuXy1tbW27dvnz592sbGBi9qNJq1a9c+88wzhoaQODo6xsXFdXZ2Xrly
hfKCGX+bsB4uX75s3KgwlBwAdu3axV6Mj4/38fGZLNbXxcUFdWMQKpVKqVTS4asHJNUDANja
2qpUqpycnMzMTP3Xto0bNwLAnj179u3b9+2335aWlp44cQK/9fDwcHd3Dw4OZhNlcjicxsbG
lpYWABgaGjJvyCcxlVY4hmE2b94MACEhIXqWZz1XL730kq+vr/bTVURERFFRkVwuHx4eHl8x
IiICANzc3AYGBmjhmb7Zk3799VcA8PLy6uvru2vhxsZGjHjTJjQ0NDExsby8XHfdzs7OOXPm
AMCJEydIB9NXcAqFAv1a1dXVd1XMGKlt27atubl5dHTUoCe/mJgY0sH0FZxGo1mxYgXozCh4
586dt99+m42cW7FixcmTJ2/dumVoX9XV1db5XEGCu6dggK6/v/+E3xYXF7u6urIbgt7eXpN+
fwAAOHz4MElh2uUWYdm6dSsAtLW11dfXa1/v6elJTk6OjY3t6+sDgKVLl3Z2drq7u5ve4/gH
QWIa+VLd3NzwA5sTZHh4uLy83MvL68yZM3hl48aNFRUVph/Hwtt3cXExSWGamkWQI0eOAEBY
WBh+Dg4O1h5zfn6+uTrCfcPMmTP1LH/x4sVLly5dvnxZKBTGxcUdPXqU7pJT/hmOYZhbt24B
gIODw5iAtgULFpi3I/Txz5o1S0eZ7u7u5uZmHX6wqqoqHXVb/kUsFuszpL6+PraKPrYhEpwZ
NqpqtXru3Llj5vXgwYMqlcq8fWVnZ8PkGdMPHjy4ZMkSdo+iTUpKyoYNG9ivtm7dOr76unXr
tOs6Ozs3NTXpGIxcLo+Ojtb+xWfPnp2VlUWCsyxisZh9jEP8/f2Li4st0RferFNTU7Uv1tTU
jDl64+Pjs3v37glTc+7ZswfLtLa2shdLSkrYLHc+Pj7e3t5oZNbxDLNz5062O+9/4fF4M2bM
6O7uJsFZisrKyjFHU7dv3z40NGSp3x8AAD744AP8saCgQDv/Jo/HS0lJ6erqkkqlOhpJTk4G
gE2bNuGPCQkJGJni5ubW29srlUqlUung4ODTTz8NE70lp7e3l/0He/HFF69evSqRSKRSqVgs
jo6OxqWdBGcRSkpKQCtFHGYfj4qK0mg0luhuZGQEO8rLyzt16hQGRwHAnDlzIiMjv/jiC/YW
f9edBIfD8fPzGxgYWL58OQDw+fyEhIQxdXFHnJ2drV23vb3dyckJvXlFRUVjWkbP8rPPPkuC
Mz9qtVp7YTty5MjNmzednZ0xBtgSPf78889sqBLb7/HjxxUKhVqt1r+duro6XNJwtABQUlIy
voXxguvt7cXyDz30kEQiGd/ypk2bACA+Pp4Mv+bn2rVrALBw4cL4+PiampodO3bMmzcPFwyc
KvMik8kwSz8A9Pf3L168GF+VtGXLFoFAYFDGzEcffRTLy2QyX1/fvr4+oVA4vgUUJRsl1dXV
hU+QYWFhLS0t7PpqKBKJJC0tzd3d3cbGJjc3l+xwBqBUKkdHR8fcwnCcd43+MIjvvvuONRrP
nTu3srLSlNb6+/t5PB5GyYtEosmKoWEFZc2ubV5eXjrio1577TUAWLt27WQFzp07x0YyA8DJ
kyfplmoq6FoVCoVmeZJrampi10sMnjM9WgRzpcPdXpuJZWpqaioqKvBzeHi47v3Q999/jyVH
Rka0r9fW1m7fvt3T01N7H3316lV6hjMDbW1teJrL9L0qniBEsrOzMZnXqlWrTGlzzZo1+liA
Mc4PAP766y/88Pzzz+vzbIqFk5KSGIa5ceNGZmbmww8/zIYu83g8Ho+3c+dO2jSYk8TERAAI
Dg42ZWF74okncJJSU1Pb2toYhlm8eDEAfPLJJ0Y3W1hYqP2spqPkoUOHsExkZCSubfr/v034
LLR+/frCwsKBgQHdJhsSnEkGs59++snQihqNpq6uDmVhZ2en7f1Ew9hHH31k9KjQuhscHKyd
vXpC8EQZYmdnZ9BqXVZWZm9vz+PxHB0dXV1d09LSyCxiceLj4wEgIyPDIKkxDLNjxw6c5qio
qJ6eHu0Ctra2XC7XuO3I6OhoVFQUWnfz8/PZUIPJKCoqwmF4enr+8ssvRvRYXV19584dssPd
I3744QcOh2Nvb2+QXXf9+vU4zRMqFU0VdXV1RoynsrISd6ZqtRo3DSkpKbqrvPzyy3R+YipF
V6N0Lly4oOfaFhoailXOnj07vszp06fRJWDESMRiMfrf0J2FvVjI20uCu29gGgd9bIfDw8N+
fn4Y6NbR0TFhmV27duEN0YiR4OsJPTw8GIYpKCgAAIFAIJfLSU8PlODYRQttpzrWNkz14ODg
oGMHh26ozMxMQ8fQ29vr7OzM5/P//vtvhmEwDGTC8CRiPFMsXdfq1asB4KuvvtLhOAkICGhq
anJxcamtrdV2kmqjUqkwpbARGQsPHz4sk8kiIiLmz59fX1/f09PD5XKPHTvGUAKvqRtiPhkd
HR047MkiGd955x0AcHJy0n2Du3btGnqEjH6UzM3NZVfc5ORkWroezFsqwzAJCQmTGU4rKytR
DZcuXdLdyJdffsnhcAIDAw3tHV/qikrNy8sDAHt7+/b2dlLSAys4vBUKBAL0FrAMDg5iPLc+
tjrUzVNPPWVo7+vWrUMrf3t7O2bBOX/+PMnoQRacRqMRCoUAkJOTo3193759ABAUFKRPI+i/
37t3r0Fdy+Vy3PzW1NTgOrds2TKDIueIKZnloLy8HOdb22ZrUBQTFjbU4q9QKFjHuSWOkJHg
rJcNGzYAQGBgIG4O0PEVERGhT91z586xMZjGCQ59Hi0tLSSg6SI4uVzu4eGBwdllZWVoDBt/
JmBCYmNjAWD58uWGdqpQKNjM6F1dXaSeaSQ4hmFu376Nx08wb6aHh4c+tn6RSGRvb49xaUZ0
un///qCgIFrbjMbqUq4aZEHkcDgZGRlDQ0PHjh0LCQn5888/75qWpqKiIjo6etasWZ2dneh9
J6Z7Mhs9wRC0999/H99cExwcrE8SpN9++02tVoeFhRl0TIYgwY2FPQ2lG4xLCw8PJ8GR4IwE
D7TqKaCysjLcMdDck+CMBI+x3Lx5U6lU3vUBDj9Y4qArMV0EFx4ezufz29raVCqV7pL4WsvU
1FR6NwMJznhCQ0M9PDz6+/s/++wzHcX6+/u7u7sBAE8XEyQ448GcWZj6ZTKuX7/e3d09f/78
sLAwmngSnEls3rwZT+x9+OGHk5XBBGwrV67EY9XEfWEKG37HUFhY+Nxzzzk7O4tEovHJppub
mzHuvKOjg80NSNAKZzxCodDGxkYmk8XFxUml0jHf4nn3N998k9RGK5zZaGlpCQoKws9vvfXW
6tWrH3vssfb29kWLFgGAn59fQ0ODg4MDzfr95AHzDbe2tmIM+hgWLVp048YN8p2T894itLW1
xcTEKBQKTOGRlpaGaXLpHc50S7Ugg4ODMpmMz+dj5BxBgiNol0oQJDiCBEcQJDiCBEcQJDiC
BEeQ4AiCBEeQ4AiCBEeQ4AiCBEeQ4AgSHEGQ4AgSHEGQ4AgSHEGCIwgSHEGCIwgSHEGCIwgS
HHG/+R87RpMZ3KibnwAAAABJRU5ErkJggg==

--------------02g4ed8YpZOFDaQZcQyFEO6b--

--------------7V55iIDz9z4m6NziTI18ItLo--

--===============2279403437165154726==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
nmglug mailing list
[email protected]
http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org

--===============2279403437165154726==--