I just read about this exploit and don’t know if I have to do anything at all.

please eli5 because I’m not good at this.

  • Björn@swg-empire.de
    3·
    5 hours ago

    Debian is pretty good at ensuring security fixes are applied to their software. Even if the specific version of a program (or the kernel) is old they make sure to include security fixes of newer versions.

    So like the other comment said just upgrading like normal should be enough.

  • dan@upvote.au
    10·
    9 hours ago

    Make sure you have the security repo enabled in /etc/apt/sources.list. It should be enabled by default. Just search that file for “security”

    Then just run apt update, apt upgrade, and reboot.

    • deleted@lemmy.world
      24·
      3 hours ago

      I think apt upgrade wouldn’t upgrade the kernel. The correct one is apt dist-upgrade.

      Edit: apt update would patch the kernel.

      • dan@upvote.au
        1·
        56 minutes ago

        You’re thinking of apt full-upgrade. dist-upgrade is the old name for it.

        The only difference between upgrade and full-upgrade is that full-upgrade will delete packages if necessary (like if you have a program installed that conflicts with a new version of another program), whereas upgrade will never do that. upgrade is safer for day-to-day updates.

        If you do an upgrade and there’s packages that need you to run full-upgrade, you’ll see a message saying that some packages have been held back.

        full-upgrade is mostly safe. You just need to read the output carefully before continuing.

      • Ooops@feddit.org
        3·
        5 hours ago

        upgrade to next kernel version != patch the kernel with backported security fixes