[ SECURITY ] Windows, Apple macOS, Linux, BSD: All hit by same 'serious' security flaw

[Mart]

Just thought I'd share this zdnet.com article with the community.

Not fully understanding the security implications of this for the average linux user like myself, but perhaps those more technically proficient amongst us could shed some more light on the subject. Here are the relevant links -

https://www.zdnet.com/article/microsoft-windows-apple-macos-linux-bsd-all-hit-by-same-serious-security-flaw/

https://access.redhat.com/security/vulnerabilities/pop_ss

https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-1087.html


Footnote:

It seems Linux servers (without a 2013 security patch/plugin) could be exploited to turn them into cryptocurrency miners.

Was just thinking - knowing about this could help protect the new LL server from similar exploitation.

[trinidad]

We've actually been looking at this one, only because it's one of the exceptions to an earlier mitigation and tied to legacy functions. A malingerer so to speak.

https://security-tracker.debian.org/tracker/CVE-2018-7755

I believe what you refer to has been mitigated for Intel back to core 2 duo in Ubuntu LTS.

TC

[Mart]

Thank you Trinidad for your prompt reply.

It was reassuring to get your feedback on this.

Cheers!

Mart.

[newtusmaximus]

TRINIDAD,  Is that back to AND including Core Duo?  Thanks.