LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 01-10-2019, 02:14 PM   #1
sombragris
Member
 
Registered: Jul 2004
Location: Asuncion, Paraguay, South America
Distribution: Slackware
Posts: 413

Rep: Reputation: 158Reputation: 158
Slackware NOT affected: Memory corruption bug in systemd, no patches yet


Security researchers have disclosed three vulnerabilities that affect a system service part of 'systemd,' a core component in Linux that manages system processes after the boot process.

The bugs exist in 'journald' service, tasked with collecting and storing log data, and they can be exploited to obtain root privileges on the target machine or to leak information. No patches exist at the moment.

Source - Slashdot story

Things like these make me thankful for PV's choice to avoid systemd. Once again we can tell the systemd crowd "I told you so..."
 
Old 01-10-2019, 03:42 PM   #2
rkelsen
Senior Member
 
Registered: Sep 2004
Distribution: slackware
Posts: 2,159

Rep: Reputation: 507Reputation: 507Reputation: 507Reputation: 507Reputation: 507Reputation: 507
Slackware NOT affected: Memory corruption bug in systemd, no patches yet

Yeah. Thanks to PV for Slackware and its sane design.

Someone yesterday was complaining about systemd not being feature complete... still!
 
7 members found this post helpful.
Old 01-10-2019, 03:48 PM   #3
Lysander666
Senior Member
 
Registered: Apr 2017
Location: The Underearth
Distribution: Slackware
Posts: 1,113
Blog Entries: 3

Rep: Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038
Not much to be said really. Things like this are just one of the reasons we're here.

It's all about making informed choices, and incidents like this are purely justification.

Last edited by Lysander666; 01-10-2019 at 03:50 PM.
 
4 members found this post helpful.
Old 01-10-2019, 07:18 PM   #4
hitest
Guru
 
Registered: Mar 2004
Location: Prince Rupert, B.C., Canada
Distribution: Slackware, OpenBSD
Posts: 5,627

Rep: Reputation: 1685Reputation: 1685Reputation: 1685Reputation: 1685Reputation: 1685Reputation: 1685Reputation: 1685Reputation: 1685Reputation: 1685Reputation: 1685Reputation: 1685
Cool

Quote:
Originally Posted by rkelsen View Post
Yeah. Thanks to PV for Slackware and its sane design.
Amen to that! Praise Pat and Bob.
 
5 members found this post helpful.
Old 01-11-2019, 02:02 PM   #5
drgibbon
Member
 
Registered: Nov 2014
Distribution: Slackware64 14.2
Posts: 418

Rep: Reputation: 242Reputation: 242Reputation: 242
From the announcement:
Code:
To the best of our knowledge, all systemd-based Linux distributions are
vulnerable, but SUSE Linux Enterprise 15, openSUSE Leap 15.0, and Fedora
28 and 29 are not exploitable because their user space is compiled with
GCC's -fstack-clash-protection.
Is this something Slackware could (or already does) take advantage of?
 
Old 01-11-2019, 02:07 PM   #6
ZhaoLin1457
Member
 
Registered: Jan 2018
Posts: 198

Rep: Reputation: 175Reputation: 175
What an amazing discovery!

Who thought that Slackware is not affected by the bugs from systemd, GNOME2, GNOME3, Plasma5, MATE, Java and many other software which it does not include?

In my opinion, on a Richter scale of ridiculous, this thread reach eleven (terraforming)

Last edited by ZhaoLin1457; 01-11-2019 at 02:13 PM.
 
1 members found this post helpful.
Old 01-11-2019, 03:11 PM   #7
Lysander666
Senior Member
 
Registered: Apr 2017
Location: The Underearth
Distribution: Slackware
Posts: 1,113
Blog Entries: 3

Rep: Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038
Quote:
Originally Posted by ZhaoLin1457 View Post
What an amazing discovery!
It was allegedly flagged several months ago on the Mint forums but the OP was shot down and accused of spreading "FUD".
 
3 members found this post helpful.
Old 01-11-2019, 03:16 PM   #8
ZhaoLin1457
Member
 
Registered: Jan 2018
Posts: 198

Rep: Reputation: 175Reputation: 175
Quote:
Originally Posted by Lysander666 View Post
It was allegedly flagged several months ago on the Mint forums but the OP was shot down and accused of spreading "FUD".
Let me quote myself:

Quote:
Originally Posted by ZhaoLin1457 View Post
Who thought that Slackware is not affected by the bugs from systemd, GNOME2, GNOME3, Plasma5, MATE, Java and many other software which it does not include?
Seriously? Why we should laugh our asses out of bugs from systemd, GNOME2, GNOME3, Plasma5, MATE, Cinnamon, Java or whatever software, if they aren't part of Slackware and we aren't affected?

How about this: is not our business and never was.

Last edited by ZhaoLin1457; 01-11-2019 at 03:18 PM.
 
Old 01-11-2019, 03:25 PM   #9
Lysander666
Senior Member
 
Registered: Apr 2017
Location: The Underearth
Distribution: Slackware
Posts: 1,113
Blog Entries: 3

Rep: Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038
Quote:
Originally Posted by ZhaoLin1457 View Post

How about this: is not our business and never was.
I think this is about Linux in general rather than just Slackware though. I personally left Debian because of systemd - as did many others - and I think that it's a tragedy that systemd has infected the Linuxsphere as it has. I don't think anyone here is laughing, I think people are bemoaning the situation and seeing that this is an indication of things to come.

Of course many, myself included, are thrilled that there is no systemd in Slackware, and as I said earlier, things like this just provide justification for Pat's decision.
 
9 members found this post helpful.
Old 01-11-2019, 03:27 PM   #10
LuckyCyborg
Member
 
Registered: Mar 2010
Posts: 366

Rep: Reputation: 156Reputation: 156
Speaking about silly bugs, how about hacking a Linux box with an ordinary USB stick label, because of Plasma5?

https://www.scmagazineuk.com/linux-s...rticle/1473251

Last edited by LuckyCyborg; 01-11-2019 at 03:31 PM.
 
3 members found this post helpful.
Old 01-11-2019, 03:29 PM   #11
ZhaoLin1457
Member
 
Registered: Jan 2018
Posts: 198

Rep: Reputation: 175Reputation: 175
How about

Quote:
Originally Posted by rkelsen View Post
Yeah. Thanks to PV for Slackware and its sane design.
 
2 members found this post helpful.
Old 01-11-2019, 03:41 PM   #12
ZhaoLin1457
Member
 
Registered: Jan 2018
Posts: 198

Rep: Reputation: 175Reputation: 175
Quote:
Originally Posted by Lysander666 View Post
I think this is about Linux in general rather than just Slackware though. I personally left Debian because of systemd - as did many others - and I think that it's a tragedy that systemd has infected the Linuxsphere as it has. I don't think anyone here is laughing, I think people are bemoaning the situation and seeing that this is an indication of things to come.

Of course many, myself included, are thrilled that there is no systemd in Slackware, and as I said earlier, things like this just provide justification for Pat's decision.
Excuse me, but you are like a good and friendly guy who (after few beers) starts talking with no way to stop about his difficult childhood and how his foster father persecuted him.

Sir! We are at no fault that you used to use Debian before and isn't our business! It is your own and solely fault for that.

Last edited by ZhaoLin1457; 01-11-2019 at 03:43 PM.
 
1 members found this post helpful.
Old 01-11-2019, 03:44 PM   #13
Lysander666
Senior Member
 
Registered: Apr 2017
Location: The Underearth
Distribution: Slackware
Posts: 1,113
Blog Entries: 3

Rep: Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038Reputation: 1038
Quote:
Originally Posted by ZhaoLin1457 View Post
Excuse me, but you are like a good and friendly guy who (after few beers) starts talking with no way to stop about his difficult childhood and how his foster father persecuted him.
If you're really unlucky I'll show you the pictures.
 
4 members found this post helpful.
Old 01-11-2019, 03:46 PM   #14
ZhaoLin1457
Member
 
Registered: Jan 2018
Posts: 198

Rep: Reputation: 175Reputation: 175
Quote:
Originally Posted by Lysander666 View Post
If you're really unlucky I'll show you the pictures.
Ha ha! That's a good one!
 
1 members found this post helpful.
Old 01-11-2019, 04:09 PM   #15
LuckyCyborg
Member
 
Registered: Mar 2010
Posts: 366

Rep: Reputation: 156Reputation: 156
Speaking about Richter magnitude scale and its eleven level, I think it was relative well described in a movie.
Attached Thumbnails
Click image for larger version

Name:	2012-movie.jpg
Views:	76
Size:	243.3 KB
ID:	29450  
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Linux Systems Running Newer Kernels Not Really Affected by Meltdown Patches LXer Syndicated Linux News 0 01-31-2018 06:15 PM
LXer: FreeBSD, Variants Not Affected by Recent GNU Bug LXer Syndicated Linux News 0 02-18-2016 03:00 PM
LXer: Latest Manjaro Linux Update Patches the Nasty EXT4 RAID Data Corruption Bug LXer Syndicated Linux News 0 06-01-2015 04:00 AM
LXer: Tips and tricks: What is the 2038 bug? Is my system affected? How do I fix this LXer Syndicated Linux News 0 02-11-2008 11:40 PM
patches for a release version or slackware/slackware-ver.#/patches acummings Slackware 2 07-05-2007 02:05 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 04:49 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration