11–20 of 186 posts
The website serves JS and does not serve it over https, and discusses Spectre bug and how to patch it. I know he is the second most important guy on linux, but the irony.
And you probably know much better than the second most important guy on linux what security means on the Internet: securing some javascript script on a random blog.
Similar to the powershell script for Windows?
Earlier quoted context omitted.
> I use Linux Mint and have not seen any recent kernel updates. If you're not aware Linux Mint turns off kernel security updates _off_, you need to check by hand.
That hasn't been true for years.
The website serves JS and does not serve it over https, and discusses Spectre bug and how to patch it. I know he is the second most important guy on linux, but the irony.
And you probably know much better than the second most important guy on linux what security means on the Internet: securing some javascript script on a random blog.
Earlier quoted context omitted.
Almost all Linux Mint users "piggy back" on top of the most recent Ubuntu Long Term Support (LTS) release. Currently the most recent Ubuntu LTS is 16.04 and by default it uses the 4.4 Linux kernel. There are patches for the 4.4 kernel from the kernel.org team and the Ubuntu team are testing and integrating these patches. The most recent updates from the Ubuntu team about Meltdown and Spectre is available from this UR…
So, there is NO kernel update available for Ubuntu 16.04 at this time.
For servers running Ubuntu, what is the risk, as long as my services don't run arbitrary user uploaded executables? As far as I can tell it is that a different remote code execution exploit can now read the entire memory, possibly leaking secrets. Assuming we have a kernel update in the next few days, I would need to install it immediately and rotate passwords and keys. Should I revoke TLS certs? Is that paranoid?
With so much going on - is there a way in linux to know whether my system is patched or not? Similar to the powershell script for Windows?
Earlier quoted context omitted.
Almost all Linux Mint users "piggy back" on top of the most recent Ubuntu Long Term Support (LTS) release. Currently the most recent Ubuntu LTS is 16.04 and by default it uses the 4.4 Linux kernel. There are patches for the 4.4 kernel from the kernel.org team and the Ubuntu team are testing and integrating these patches. The most recent updates from the Ubuntu team about Meltdown and Spectre is available from this UR…
So, there is NO kernel update available for Ubuntu 16.04 at this time.
"Ubuntu users of the 64-bit x86 architecture (aka, amd64) can expect updated kernels by the original January 9, 2018 coordinated release date, and sooner if possible."
https://insights.ubuntu.com/2018/01/04/ubuntu-updates-for-th...
If your Linux systems are running a normal Linux distribution, go update your kernel. They should all have the updates in them already. I use Linux Mint and have not seen any recent kernel updates. Which kernel version is considered safe?
> However there are lots of systems out there that are not running “normal” Linux distributions for various reasons (rumor has it that it is way more than the “traditional” corporate distros). They rely on the LTS kernel updates, or the normal stable kernel updates, or they are in-house franken-kernels. For those people here’s the status of what is going on regarding all of this mess in the upstream kernels you can use.
Mint is one of those.