[WARNING] Patch your Linux Systems now.

[nlinecomputers]

Patch now: A newly discovered critical Linux vulnerability probably affects your systems | TechRepublic

Dubbed PwnKit, it's been sitting in a user policy module used in Linux distros for over a decade and can be used by anyone to gain root privileges. Here's what you can do to protect your systems.

www.techrepublic.com

 

[Sky-Knight]

None of my Ubuntu or Debian systems report patches being available at this time, so either this is old news being repackaged and I got updates last week with the recent Ubuntu CVE or there aren't patches for all systems out yet.

 

[nlinecomputers]

CVE-2021-4034 | Ubuntu

Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things.

ubuntu.com

 

[nlinecomputers]

USN-5252-1: PolicyKit vulnerability | Ubuntu security notices | Ubuntu

Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things.

ubuntu.com

 

[Sky-Knight]

Lol it's been bugging me all day how my servers got patched...

I forgot... I setup unattended-upgrade... it patched my boxen for me yesterday morning at 6:41am.

Thank you past me... you did good!

Start-Date: 2022-01-21  06:52:20
Commandline: /usr/bin/unattended-upgrade
Upgrade: vim-common:amd64 (2:8.1.2269-1ubuntu5.4, 2:8.1.2269-1ubuntu5.6), vim-runtime:amd64 (2:8.1.2269-1ubuntu5.4, 2:8.1.2269-1ubuntu5.6), vim:amd64 (2:8.1.2269-1ubuntu5.4, 2:8.1.2269-1ubuntu5.6), vim-tiny:amd64 (2:8.1.2269-1ubuntu5.4, 2:8.1.2269-1ubuntu5.6)
End-Date: 2022-01-21  06:52:22

Start-Date: 2022-01-21  06:52:24
Commandline: /usr/bin/unattended-upgrade
Upgrade: xxd:amd64 (2:8.1.2269-1ubuntu5.4, 2:8.1.2269-1ubuntu5.6)
End-Date: 2022-01-21  06:52:25

Start-Date: 2022-01-26  06:41:20
Commandline: /usr/bin/unattended-upgrade
Upgrade: libpolkit-gobject-1-0:amd64 (0.105-26ubuntu1.1, 0.105-26ubuntu1.2), libpolkit-agent-1-0:amd64 (0.105-26ubuntu1.1, 0.105-26ubuntu1.2), policykit-1:amd64 (0.105-26ubuntu1.1, 0.105-26ubuntu1.2)
End-Date: 2022-01-26  06:41:22

 

[GTP]

Thanks for the heads up.