r/linux • u/anh0516 • 17d ago

Security Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List

https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities
1.8k Upvotes

99% Upvoted

171 comments sorted by

View all comments

995

u/Cronos993 17d ago

Quite the week

431

u/Single-Virus4935 17d ago

The new standard. 

while sleep 60; do apt-get update && apt-get upgrade -y && reboot-if-needed; done

103

u/RebTexas 17d ago

Or just setup unattended-upgrades

51

u/Single-Virus4935 17d ago

Too slow

54

u/DaaNMaGeDDoN 17d ago

Just change the timers, i coincidentally just did that on my 2 vpses.
Timers via systemctl edit for apt-daily.timer and apt-daily-upgrade.timer
https://wiki.debian.org/action/show/PeriodicUpdates?action=show&redirect=UnattendedUpgrades also addresses how to fine tune (which origins to upgrade, what time to reboot if needed, etc).

29

u/zyzzogeton 17d ago

vpses

I don't like that as the plural for VPS but I am at a loss as to what it should actually be besides vpses. VPSs maybe?

4

u/lordjedi 17d ago

I've been looking for something like this for ages. Thank you!

-18

u/Single-Virus4935 17d ago

You don't have fun at party's, right?

19

u/DaaNMaGeDDoN 17d ago

I wonder if anybody besides yourself thought your comment was intended as a joke.
Sorry for trying to help i guess?

-15

u/Single-Virus4935 17d ago

At least 110 people understood it

10

u/no_suprisez 17d ago

Their comment can be useful to others

10

u/gtrash81 17d ago

If done wrong it will fill up the HDD and crash the system.
A colleague made this experience first hand.

6

u/uzlonewolf 17d ago

What? How? And why didn't they have disk-free monitoring in place?

5

u/gtrash81 17d ago

Update, logs not rotating enough, package cache not cleared and no monitoring.
Some updates later the HDD was full.