this post was submitted on 31 Mar 2024
209 points (94.8% liked)

linuxmemes

21180 readers
809 users here now

Hint: :q!


Sister communities:


Community rules (click to expand)

1. Follow the site-wide rules

2. Be civil
  • Understand the difference between a joke and an insult.
  • Do not harrass or attack members of the community for any reason.
  • Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
  • Bigotry will not be tolerated.
  • These rules are somewhat loosened when the subject is a public figure. Still, do not attack their person or incite harrassment.
  • 3. Post Linux-related content
  • Including Unix and BSD.
  • Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of sudo in Windows.
  • No porn. Even if you watch it on a Linux machine.
  • 4. No recent reposts
  • Everybody uses Arch btw, can't quit Vim, and wants to interject for a moment. You can stop now.

  • Please report posts and comments that break these rules!

    founded 1 year ago
    MODERATORS
     
    • Garnet: Running Debian Sid, so affected by vulnerability; hastily downgraded to 5.4.5
    • Amethyst: FreeBSD still ships 5.4.x
    • Pearl: Obsolete and currently unused hardware, so Linux hasn't been updated since October and OSX hasn't been updated since 2009.
    • Pearl-II: Void Linux still ships with 5.4.x, and the malware requires glibc anyway (I'm running musl); macOS partition still has 5.4.x (which is strange, given that I use pkgsrc, which shipped 5.6.x)
    • LapisLazuli: According to Mageia, everything's fine
    • Spinel: Running Raspbian Stable, which still ships 5.4.x
    you are viewing a single comment's thread
    view the rest of the comments
    [โ€“] [email protected] 1 points 7 months ago (1 children)

    I think Steam runtime has some xz stuff does it not?

    [โ€“] [email protected] 1 points 7 months ago

    Everything has it to some degree. More important is:

    1. is it using the compromised version?
    2. Is ssh package using sysytemd-notify?
    3. Is ssh server service being open to the internet?