Atomicorp

Could the clamav updates be released for the atomic repo as well? The ASL repo updates appeared awhile back but still not seeing updates for our rules only boxes.

Thanks.

Thanks!

For the recently disclosed spectre variants 3A and 4, are the current ASL protections in the kernel sufficient or will new mitigations need to be implemented due to the nature of the variants?

Thanks.

Thank you. Not sure if I'm reading you correctly but are you saying that 4.4.109 has all of the same mitigations as the 4.14.x releases?

FYI, ClamAV 0.100.0 is out (in regards to updates for the ASL and Atomic repo related packages):

https://blog.clamav.net/2018/04/clamav- ... eased.html

Thanks.

Just in case it wasn't seen, a bump of:

__

Mike:

Could you please post a current status as to what mitigations were introduced in what kernels (so those who don't update their kernel with each release will know the minimum needed updates)?

TIA!

__

Thanks!

Mike:

Could you please post a current status as to what mitigations were introduced in what kernels (so those who don't update their kernel with each release will know the minimum needed updates)?

TIA!

It isn't the same type of software as R1Soft but we've been experimenting with:

https://www.borgbackup.org/

An example:

https://www.jamesthebard.net/backing-up-with-borg/

FYI, ClamAV 0.99.4 with security fixes is out (in regards to updates for the ASL and Atomic repo related packages):

http://blog.clamav.net/2018/03/clamav-0 ... eased.html

Thanks.

Thanks.

What's the current status of the next update?

Thanks.

Just the one syscheckd process on the boxes I just checked.

It will run but with a caveat - you need a custom module built for the ASL kernel. Their automated build system would always fail when we tried that way. We were then able to get it running when they manually built us a custom module for the ASL kernel we had in use. Unfortunately, it took quite som...

Bump. Any update?

Thanks.

jgodwin: What's the ETA on the update to ossec to deal with the file not found messages? They can get quite voluminous. Any mitigations until the update is released (other than turning off alerts for rule 1002 which we wouldn't want to do since it is a rule that catches other potentially legitimate ...