LibreTechni.ca
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
hirihit640@sh.itjust.works to Selfhosted@lemmy.worldEnglish · 22 hours ago

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

thehackernews.com

external-link
message-square
11
fedilink
  • cross-posted to:
  • linux@lemmy.ml
  • linux@programming.dev
  • programming@programming.dev
  • programming@programming.dev
  • cybersecurity@infosec.pub
37
external-link

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

thehackernews.com

hirihit640@sh.itjust.works to Selfhosted@lemmy.worldEnglish · 22 hours ago
message-square
11
fedilink
  • cross-posted to:
  • linux@lemmy.ml
  • linux@programming.dev
  • programming@programming.dev
  • programming@programming.dev
  • cybersecurity@infosec.pub
Ubuntu and RHEL lack fixes for a Linux TCP use-after-free that Anthropic says it exploited to run commands as root on MPTCP servers.

Every Go application since 1.24 will activate MPTCP on their sockets by default.

And I’ve read that this includes Syncthing, which is why I’m posting this here

  • moldy_rice@piefed.keyboardvagabond.com
    link
    fedilink
    English
    arrow-up
    3
    ·
    7 hours ago

    Does unattended upgrades fix this on Debian? Or do I have to reboot now for it to take effect?

    • chronicledmonocle@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      6 hours ago

      Depends on your settings. You need to reboot for kernel upgrades, so you’re good if you have automatic periodic reboots configured and kernel updates applied unattended.

Selfhosted@lemmy.world

selfhosted@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !selfhosted@lemmy.world

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don’t duplicate the full text of your blog or readme if you’re providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

  • selfh.st Newsletter and index of selfhosted software and apps
  • awesome-selfhosted software
  • awesome-sysadmin resources
  • Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 294 users / day
  • 1.43K users / week
  • 5.56K users / month
  • 13.9K users / 6 months
  • 3 local subscribers
  • 63.4K subscribers
  • 4.74K Posts
  • 111K Comments
  • Modlog
  • mods:
  • Ruud@lemmy.world
  • Loki@lemmy.world
  • CannaVet@lemmy.world
  • devve@lemmy.world
  • ayyy@sh.itjust.works
  • curbstickle@anarchist.nexus
  • curbstickle_lw@lemmy.world
  • BE: 0.19.5
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org