3 ms·
And what us regular folks who run Ubuntu LTS on VMs need to do, if anything.
by tambourine_man 3y ago
And what us regular folks who run Ubuntu LTS on VMs need to do, if anything.
- cpach 3y agoFirst: Apply all official patches via APT. That’s the most important thing. The easiest way to avoid getting pwned is to apply security patches without too long delay. Then consider defense-in-depth. If you have sshd exposed to the Internet, you could put it behind a VPN such as Tailscale (or pure WireGuard). And FWIW: With our current knowledge, any LTS version of Ubuntu should not have been affected by this backdoor.
- politelemon 3y agoAs far as I understand it, you need to check for the version of xz/liblzma. Run this: dpkg -l | grep liblzma # or xz --version If you see 5.6.0 or 5.6.1, you should panic, and probably recreate. But it is unlikely you will see that especially on LTS as they are using an older version. On Ubuntu 22.04 I get version "5.2.5" Ubuntu 24.04 was about to be affected but they removed that version when the news broke.