2 Likes
1 Like
1 Like
2 Likes
2 Likes
Teflon is supposedly not problematic, but C8 and similar are silent death. In addition, mass poisoning of people on the entire planet in millions of different ways for decades.
3 Likes
I thought, VIM is the PC-Speaker test application for *nix 
1 Like
3 Likes
Fixed in kernel 5.11? Maybe?
So just need to make sure the kernel is less than 2 years old?
Sounds silly for home users, but I can see people running very old systems needing to know
Also, talk about responsible disclosure; fix 2 years before wide publication…
And, even some mainstream kernels might be old too…
3 Likes
I know a ton of machines that still have 4.9.* 
2 Likes
eeep! 
3 Likes
This was a great explanation.
1 Like
RHEL 8, right? RHEL 9 should be on 5.xx now on average I think. But was this getting backported?
2 Likes
Paradoxically no, it’s Debian’s 9.13
If I understand correctly, the bug is present from 5.11 to probably 6.1.9 or something like that.
The Red Hat Enterprise Linux 8.4 and before not affected, because the patch that introduced the bug exists starting from 8.6.
1 Like
Well then it is a human fault.
https://security-tracker.debian.org/tracker/CVE-2023-0386
This shows the fix for the CVE was backported to all still supported version, Debian 9.13 is EOL sind 2020 afaik though so if you run EOL software you’ll get security issues.
2 Likes
I can talk and repeat and people in high positions know their stuff “better” than me and…
Not my problem… I’m not paid to worry about it. They have their own sysadm for these machines.
EOL is not a good idea but it also doesn’t magically create a threat in itself. If the sysadm is experienced, the EOL OS can keep it tight.
1 Like
All my Debian’s are bookworms with 6.x kernels. Only one machine is still bullseye, but it is in the plan for update and for now it is in rolling, with 6.6 kernel but it is a specific ARM machine.
In the queue will also be all Alpine 3.19.7 because the deadline is slowly approaching.
1 Like
Alright I should not have looked into this … I knew a little about it but I looked at the current regulation in the EU and it is disappointing, not being taken too seriously and most of all not actively being investigated and even though probably one of the tightest regulations world wide not nearly enough and the thought of it will make my sleep worse.
2 Likes