Security Updated Kernels

[Member antixjim]

Regarding the recommendation to update the kernel for vulnerabilities:

I apparently have 4.9.0-264 installed. The news item indicates I should update to 4.9.0-279, but I cannot tell which one, there are several listed in Package Installer.
My system information is:

System: Kernel: 4.9.0-264-antix.1-486-smp i686 bits: 32 compiler: gcc v: 8.3.0
parameters: BOOT_IMAGE=/boot/vmlinuz-4.9.0-264-antix.1-486-smp
root=UUID=9de8061d-0998-4373-86ff-9d8ce36a999c ro quiet
Desktop: IceWM 2.8.0 vt: 7 dm: SLiM 1.3.6
Distro: antiX-19.4_386-base Grup Yorum 20 May 2021 base: Debian GNU/Linux 10 (buster)
Machine: Type: Desktop System: Compaq product: Compaq PC v: N/A serial: <filter> Chassis:
type: 6 serial: <filter>
Mobo: Compaq model: 06E4h serial: <filter> BIOS: Compaq v: 786K1 date: 07/26/2001
Battery: Message: No system battery data found. Is one present?
Memory: RAM: total: 747 MiB used: 144.7 MiB (19.4%)
RAM Report: permissions: Unable to run dmidecode. Root privileges required.
PCI Slots: Permissions: Unable to run dmidecode. Root privileges required.
CPU: Info: Single Core model: AMD Duron bits: 32 type: UP arch: K7 Thunderbird family: 6
model-id: 3 stepping: 0 microcode: N/A cache: L2: 64 KiB bogomips: 1402
Speed: 701 MHz min/max: N/A Core speed (MHz): 1: 701
Flags: 3dnow 3dnowext 3dnowprefetch cmov cx8 de fpu fxsr mca mce mmx mmxext msr mtrr
pae pat pge pse pse36 sep syscall tsc vme vmmcall
Vulnerabilities: Type: itlb_multihit status: Not affected
Type: l1tf status: Not affected
Type: mds status: Not affected
Type: meltdown status: Not affected
Type: spec_store_bypass status: Vulnerable
Type: spectre_v1 mitigation: usercopy/swapgs barriers and __user pointer sanitization
Type: spectre_v2 mitigation: Full generic retpoline, STIBP: disabled, RSB filling
Type: srbds status: Not affected
Type: tsx_async_abort status: Not affected
Graphics: Device-1: NVIDIA NV34 [GeForce FX 5200] vendor: eVga.com. driver: nouveau v: kernel
bus-ID: 00:05.0 chip-ID: 10de:0322 class-ID: 0300
Display: x11 server: X.Org 1.20.4 driver: loaded: nouveau
unloaded: fbdev,modesetting,vesa alternate: nv display-ID: :0.0 screens: 1
Screen-1: 0 s-res: 1440×900 s-dpi: 96 s-size: 380x238mm (15.0×9.4″)
s-diag: 448mm (17.7″)
Monitor-1: DVI-I-1 res: 1440×900 hz: 60 dpi: 99 size: 370x230mm (14.6×9.1″)
diag: 436mm (17.2″)
OpenGL: renderer: NV34 v: 1.5 Mesa 18.3.6 direct render: Yes
Audio: Device-1: VIA VT82C686 AC97 Audio vendor: Compaq driver: snd_via82xx v: kernel
bus-ID: 00:14.5 chip-ID: 1106:3058 class-ID: 0401
Sound Server-1: ALSA v: k4.9.0-264-antix.1-486-smp running: yes
Network: Device-1: Lite-On LNE100TX vendor: Netgear FA310TX driver: tulip v: 1.1.15-NAPI
port: 1000 bus-ID: 00:04.0 chip-ID: 11ad:0002 class-ID: 0200
IF: eth0 state: down mac: <filter>
Device-2: VIA VT82C686 [Apollo Super ACPI] type: network bridge driver: N/A
modules: i2c_viapro, via686a port: 1820 bus-ID: 00:14.4 chip-ID: 1106:3057
class-ID: 0680
Device-3: Ralink RT5370 Wireless Adapter type: USB driver: rt2800usb bus-ID: 2-1:2
chip-ID: 148f:5370 class-ID: 0000 serial: <filter>
IF: wlan0 state: up mac: <filter>
IP v4: <filter> scope: global broadcast: <filter>
IP v6: <filter> type: dynamic mngtmpaddr scope: global
IP v6: <filter> scope: link
WAN IP: <filter>
Bluetooth: Message: No bluetooth data found.
Logical: Message: No logical block device data found.
RAID: Message: No RAID data found.
Drives: Local Storage: total: 149.05 GiB used: 3.91 GiB (2.6%)
SMART Message: Unable to run smartctl. Root privileges required.
ID-1: /dev/sda maj-min: 8:0 vendor: Western Digital model: WD1600AAJB-00PVA0
size: 149.05 GiB block-size: physical: 512 B logical: 512 B speed: <unknown> type: N/A
serial: <filter> rev: 7H00 scheme: MBR
Floppy-1: /dev/fd0
Optical-1: /dev/sr0 vendor: COMBO model: IDE5232CO rev: 0059 dev-links: cdrom,cdrw,dvd
Features: speed: 52 multisession: yes audio: yes dvd: yes rw: cd-r,cd-rw state: running
Partition: ID-1: / raw-size: 29.58 GiB size: 28.99 GiB (98.01%) used: 3.73 GiB (12.9%) fs: ext4
dev: /dev/sda1 maj-min: 8:1 label: rootantiX19
uuid: 9de8061d-0998-4373-86ff-9d8ce36a999c
ID-2: /home raw-size: 118.32 GiB size: 115.96 GiB (98.01%) used: 182.9 MiB (0.2%)
fs: ext4 dev: /dev/sda3 maj-min: 8:3 label: homeantiX
uuid: 3f48afc5-249c-4af6-b2a0-637249ad6986
Swap: Kernel: swappiness: 10 (default 60) cache-pressure: 50 (default 100)
ID-1: swap-1 type: partition size: 1.12 GiB used: 76 KiB (0.0%) priority: -1
dev: /dev/sda2 maj-min: 8:2 label: swapantiX uuid: a0040e62-9841-4407-bbc9-a9af4ba8b1cd
Unmounted: Message: No unmounted partitions found.
USB: Hub-1: 1-0:1 info: Full speed (or root) Hub ports: 2 rev: 1.1 speed: 12 Mb/s
chip-ID: 1d6b:0001 class-ID: 0900
Hub-2: 2-0:1 info: Full speed (or root) Hub ports: 2 rev: 1.1 speed: 12 Mb/s
chip-ID: 1d6b:0001 class-ID: 0900
Device-1: 2-1:2 info: Ralink RT5370 Wireless Adapter type: Network driver: rt2800usb
interfaces: 1 rev: 2.0 speed: 12 Mb/s power: 450mA chip-ID: 148f:5370 class-ID: 0000
serial: <filter>
Sensors: Message: No sensor data found. Is lm-sensors configured?
Repos: Packages: apt: 1524 lib: 814
Active apt repos in: /etc/apt/sources.list.d/antix.list
1: deb http: //la.mxrepo.com/antix/buster buster main nonfree nosystemd
Active apt repos in: /etc/apt/sources.list.d/buster-backports.list
1: deb http: //deb.debian.org/debian buster-backports main contrib non-free
Active apt repos in: /etc/apt/sources.list.d/debian-stable-updates.list
1: deb http: //ftp.us.debian.org/debian/ buster-updates main contrib non-free
Active apt repos in: /etc/apt/sources.list.d/debian.list
1: deb http: //ftp.us.debian.org/debian/ buster main contrib non-free
2: deb http: //security.debian.org/ buster/updates main contrib non-free
No active apt repos in: /etc/apt/sources.list.d/onion.list
No active apt repos in: /etc/apt/sources.list.d/various.list
Processes: CPU top: 5 of 143
1: cpu: 31.0% command: yad pid: 8408 mem: 24.7 MiB (3.3%)
2: cpu: 3.4% command: xorg pid: 1893 mem: 39.4 MiB (5.2%)
3: cpu: 1.8% command: packageinstaller pid: 7121 mem: 51.1 MiB (6.8%)
4: cpu: 1.7% command: conky pid: 2228 mem: 8.90 MiB (1.1%)
5: cpu: 0.9% command: gtkdialog pid: 7409 mem: 25.3 MiB (3.3%)
Memory top: 5 of 143
1: mem: 51.1 MiB (6.8%) command: packageinstaller pid: 7121 cpu: 1.8%
2: mem: 39.4 MiB (5.2%) command: xorg pid: 1893 cpu: 3.4%
3: mem: 28.9 MiB (3.8%) command: rox pid: 2128 cpu: 0.0%
4: mem: 25.3 MiB (3.3%) command: gtkdialog pid: 7409 cpu: 0.9%
5: mem: 24.7 MiB (3.3%) command: yad pid: 8408 cpu: 31.0%
Info: Processes: 143 Uptime: 12h 58m wakeups: 5 Init: SysVinit v: 2.93 runlevel: 5 default: 5
tool: service Compilers: gcc: 8.3.0 alt: 8 Client: shell wrapper v: 5.0.3-release
inxi: 3.3.06

I cannot tell if I have pae or not and which updated kernel I should install, if any.

[Member Robin]

Helpful

Up

0

::

For the question which kernel is recommended for your equipment please wait for an answer form somebody who knows better than me, but
yes, you have a pae CPU. You can read it yourself:

Flags: 3dnow 3dnowext 3dnowprefetch cmov cx8 de fpu fxsr mca mce mmx mmxext msr mtrr
pae pat pge pse pse36 sep syscall tsc vme vmmcall

So any 686 pae kernel is a good idea for your PC.

Windows is like a submarine. Open a window and serious problems will start.

[Moderator caprea]

Helpful

Up

0

::

antixjim wrote:

I should update to 4.9.0-279, but I cannot tell which one, there are several listed in Package Installer.

This sounds like you’re talking about synaptic and not the package installer,
because there’s only one 4.9.0 kernel in the package installer. The package installer chooses and installs exactly the right one for you.
control-centre > software > package installer > Linux kernel or kernel

[Member antixjim]

Helpful

Up

0

::

Thank you. Got it done. I did see two warnings:

1. Something about could not find an initial ram disk that it could do anything with. Did not try to write initrid.

I assume the first is not a problem since the computer rebooted successfully.

2. Could not something and a suggestion to delete cryptset-initramfs.

I think I have seen this before on other actions. What does crypset-initramfs do and can I safely remove it?

[Author]

Posts