Roundtable

roundtable@muug.ca

4 participants
2592 discussions

yay systemd-boot
by Trevor Cordes 21 May '24

21 May '24

Upgraded to F39 tonight (F38 just announced EOL in 1 week!) " Install an image using systemd-boot rather than grub With this release, systemd-boot can be selected as an alternative boot loader for testing and development purposes. " Fedora release notes has the above nugget. Yay, groan, another systemd feature-creep. Now grub is under attack? We really need a new way to boot? Ugh.

2 1

Use laptop as k/v/m
by Adam Thompson 13 May '24

13 May '24

This isn't a traditional KVM *switcher*, it lets you use your existing laptop as the keyboard/video/mouse for an existing system... I think. https://www.crowdsupply.com/techxartisan/openterface-mini-kvm If anyone gets one, let us know how it works! -Adam Get Outlook for Android<https://aka.ms/AAb9ysg>

2 1

Internet Message Format line length max
by Trevor Cordes 11 May '24

11 May '24

As a followup to my presentation where I mentioned SMTP line length limits biting me (one of the last slides): RFC5322 Internet Message Format https://www.rfc-editor.org/rfc/rfc5322.txt "There are two limits that this standard places on the number of characters in a line. Each line of characters MUST be no more than 998 characters, and SHOULD be no more than 78 characters, excluding the CRLF." I was slightly off, I said 1024 chars max. It's 1000 hard max, and "aim for" 80 chars max -- including the obligatory CR/LF. So the fogeys hard-NL'ing their text-only emails... you're doing it right and those young'ns are out of spec! :-) I still don't know why opendkim was barfing on ~500 char lines. One would think they would allow up to RFC5322 spec. Maybe DKIM spec or opendkim itself has a lower limit. I tried using the source luke but I couldn't quickly find the offending code, and since my bug was solved, I moved on. Upon further reflection, perhaps I should file a bug... Now, to go and make sure my custom headers are wrapping at 76...

1 0

DMARC slides up
by Trevor Cordes 09 May '24

09 May '24

For those interested, I put the slides for the DMARC presentation on the web page: https://muug.ca/meetings/23-24.html#may

1 0

Reminder: MUUG Meeting, Tonight, May 7, 7:30pm (In-person/Hybrid Meeting) -- DMARC/SPF/DKIM
by Gilbert Detillieux 07 May '24

07 May '24

A reminder that the MUUG meeting will be this evening, both in person and online... The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting IN PERSON, on Tuesday, May 7th, at 7:30pm. Yes, that's the FIRST Tuesday of the month... DMARC/SPF/DKIM (with one-click unsubscribe and alignment) Do you have anything at all to do with email daemons, managing email hosted by a third party provider, or manage DNS? Google just made your life a lot more complicated. (And heaven help you if you have anything to do with "mass" email sending.) Come on down to MUUG this month and Trevor Cordes will talk about all the technologies you must now implement to stay borg-compliant and ensure your emails don't get dumped into the Spam box or worse! We're talking DMARC, DKIM, SPF... And what's with this new "alignment" thing? If there's time we'll even go into one-click unsubscribe! Where to find the Meeting: Fortress Software Inc., 350 Keewatin St -- Unit #2 We have a new in-person meeting location now! Brad Vokey has graciously let us use his work office for our next in-person meeting. The meeting room will be open by 7:00 pm, with the actual meeting starting at 7:30 pm. If driving, enter the lot using the most north east entrance and drive around to the south west corner of the building (see route in map detail on poster linked below). You can use any of the free, ample, and safe parking spots that say "reserved" in front of units #1 through #4 before entering unit #2. Bus stops #30814 and #30880 (route 77) are only 150 meters away. The last bus leaves for Polo Park at 10:15 pm and for Garden City at 10:31 pm. Logan Ave. bus routes #19, #26, and #27 are a 600 meter (8 minute) walk to the south. For those unable or preferring not to attend in person, the meeting will also be available online, using BBB as usual. Stay tuned to our muug.ca home page for the official URL, which will be made available about a half hour before the meeting starts. (Reload the page if you don't see the link, or if there are issues with connecting.) The group now holds its meetings at 7:30pm on the *first* Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. For more information about MUUG, and its monthly meetings, check out their web server: https://muug.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board, or linking to it on social media: https://muug.ca/meetings/MUUGmeeting.pdf -- Gilbert E. Detillieux E-mail: <gedetil(a)muug.ca> Manitoba UNIX User Group Web: http://muug.ca/

2 5

Emails sent to Shaw email addresses being blocked
by Montana Quiring 07 May '24

07 May '24

Hello, Anyone had any issues with sending to Shaw email addresses recently? I have a client that sends out smallish batches of emails once every week or so, and last week a number of them we blocked, but some went through. Never had this happen before. I confirmed with shaw that some of the addresses were active and receiving emails but that's about as helpful as they would allow themselves to be. Returned email (with email addresses made private): This is the mail system at host leaf102.mfilter.dimenoc.com. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to postmaster. If you do so, please include this problem report. You can delete your own text from the attached returned message. The mail system <-shawuser1-(a)shaw.ca>: host shw-central.mx.a.cloudfilter.net[15.222.199.59] refused to talk to me: 554 shw-ibgw-4002a.ext.cloudfilter.net cmsmtp 72.29.89.5 blocked AUP#BL <-shawuser2-(a)shaw.ca>: host shw-central.mx.a.cloudfilter.net[15.222.199.59] refused to talk to me: 554 shw-ibgw-4002a.ext.cloudfilter.net cmsmtp 72.29.89.5 blocked AUP#BL Reporting-MTA: dns; leaf102.mfilter.dimenoc.com X-Postfix-Queue-ID: 867B32645F X-Postfix-Sender: rfc822; sender(a)company.com Arrival-Date: Tue, 30 Apr 2024 13:00:50 -0400 (EDT) Final-Recipient: rfc822; -shawuser1-(a)shaw.ca Original-Recipient: rfc822;-shawuser1-(a)shaw.ca Action: failed Status: 4.0.0 Remote-MTA: dns; shw-central.mx.a.cloudfilter.net Diagnostic-Code: smtp; 554 shw-ibgw-4002a.ext.cloudfilter.net cmsmtp 72.29.89.5 blocked AUP#BL Final-Recipient: rfc822; -shawuser2-(a)shaw.ca Original-Recipient: rfc822;-shawuser2-(a)shaw.ca Action: failed Status: 4.0.0 Remote-MTA: dns; shw-central.mx.a.cloudfilter.net Diagnostic-Code: smtp; 554 shw-ibgw-4002a.ext.cloudfilter.net cmsmtp 72.29.89.5 blocked AUP#BL Regards, -Montana

3 5

Seeking a ride to today's MUUG meetings to/from East Kildonan
by Hartmut W Sager 07 May '24

07 May '24

Hi folks. I am seeking a ride to today's MUUG meetings to/from East Kildonan. I live at the corner of Watt & Munroe. Can anyone help? Oh, I do need a smoke-free air during such rides (I'm quite allergic to smoke). Thanks! Hartmut W Sager - Tel +1-204-339-8331

1 0

Optical media longevity guidelines
by Adam Thompson 03 May '24

03 May '24

I wholeheartedly applaud this example of My Tax Dollars At Work! https://www.canada.ca/en/conservation-institute/services/conservation-prese… -Adam Get Outlook for Android<https://aka.ms/AAb9ysg>

3 2

Fw: [SECURITY] Fedora 38 Update: kernel-6.8.8-100.fc38
by Trevor Cordes 03 May '24

03 May '24

Wow, CVE much? Can someone say "ran the kernel through some kind of analyzer"? I know how to check each CVE to see if any are other-than-nothingburger, but how to check 30-50 at once to see if any are other-than-nothingburger? I haven't seen a sheet like this for the kernel in a long time! Might be one of the rare cases where it's just easier to update & reboot... sigh Begin forwarded message: Date: Fri, 3 May 2024 01:38:45 +0000 (UTC) From: updates(a)fedoraproject.org To: package-announce(a)lists.fedoraproject.org Subject: [SECURITY] Fedora 38 Update: kernel-6.8.8-100.fc38 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2276666 - CVE-2024-26922 kernel: drm/amdgpu: validate the parameters of bo mapping operations more clearly [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2276666 [ 2 ] Bug #2277155 - Fedora 39 - Device Driver for ISM not configured in kernel https://bugzilla.redhat.com/show_bug.cgi?id=2277155 [ 3 ] Bug #2277170 - CVE-2024-26924 kernel: netfilter: nft_set_pipapo: do not free live element [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2277170 [ 4 ] Bug #2278253 - CVE-2024-27022 kernel: fork: defer linking file vma until vma is fully initialized [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278253 [ 5 ] Bug #2278255 - CVE-2024-27021 kernel: r8169: fix LED-related deadlock on module removal [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278255 [ 6 ] Bug #2278257 - CVE-2024-27020 kernel: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278257 [ 7 ] Bug #2278259 - CVE-2024-27019 kernel: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278259 [ 8 ] Bug #2278261 - CVE-2024-27018 kernel: netfilter: br_netfilter: skip conntrack input hook for promisc packets [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278261 [ 9 ] Bug #2278263 - CVE-2024-27017 kernel: netfilter: nft_set_pipapo: walk over current view on netlink dump [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278263 [ 10 ] Bug #2278265 - CVE-2024-27016 kernel: netfilter: flowtable: validate pppoe header [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278265 [ 11 ] Bug #2278267 - CVE-2024-27015 kernel: netfilter: flowtable: incorrect pppoe tuple [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278267 [ 12 ] Bug #2278269 - CVE-2024-27014 kernel: net/mlx5e: Prevent deadlock while disabling aRFS [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278269 [ 13 ] Bug #2278271 - CVE-2024-27013 kernel: tun: limit printing rate when illegal packet received by tun dev [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278271 [ 14 ] Bug #2278276 - CVE-2024-27012 kernel: netfilter: nf_tables: restore set elements when delete set fails [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278276 [ 15 ] Bug #2278278 - CVE-2024-27011 kernel: netfilter: nf_tables: fix memleak in map from abort path [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278278 [ 16 ] Bug #2278280 - CVE-2024-27010 kernel: net/sched: Fix mirred deadlock on device recursion [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278280 [ 17 ] Bug #2278282 - CVE-2024-27009 kernel: s390/cio: fix race condition during online processing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278282 [ 18 ] Bug #2278284 - CVE-2024-27008 kernel: drm: nv04: Fix out of bounds access [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278284 [ 19 ] Bug #2278286 - CVE-2024-27007 kernel: userfaultfd: change src_folio after ensuring it's unpinned in UFFDIO_MOVE [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278286 [ 20 ] Bug #2278288 - CVE-2024-27006 kernel: thermal/debugfs: Add missing count increment to thermal_debug_tz_trip_up() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278288 [ 21 ] Bug #2278290 - CVE-2024-27005 kernel: interconnect: Don't access req_list while it's being manipulated [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278290 [ 22 ] Bug #2278292 - CVE-2024-27004 kernel: clk: Get runtime PM before walking tree during disable_unused [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278292 [ 23 ] Bug #2278294 - CVE-2024-27003 kernel: clk: Get runtime PM before walking tree for clk_summary [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278294 [ 24 ] Bug #2278296 - CVE-2024-27002 kernel: clk: mediatek: Do a runtime PM get on controllers during probe [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278296 [ 25 ] Bug #2278298 - CVE-2024-27001 kernel: comedi: vmk80xx: fix incomplete endpoint checking [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278298 [ 26 ] Bug #2278300 - CVE-2024-27000 kernel: serial: mxs-auart: add spinlock around changing cts state [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278300 [ 27 ] Bug #2278302 - CVE-2024-26999 kernel: serial/pmac_zilog: Remove flawed mitigation for rx irq flood [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278302 [ 28 ] Bug #2278304 - CVE-2024-26998 kernel: serial: core: Clearing the circular buffer before NULLifying it [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278304 [ 29 ] Bug #2278309 - CVE-2024-26996 kernel: usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278309 [ 30 ] Bug #2278311 - CVE-2024-26995 kernel: usb: typec: tcpm: Correct the PDO counting in pd_set [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278311 [ 31 ] Bug #2278313 - CVE-2024-26994 kernel: speakup: Avoid crash on very long word [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278313 [ 32 ] Bug #2278315 - CVE-2024-26993 kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278315 [ 33 ] Bug #2278317 - CVE-2024-26992 kernel: KVM: x86/pmu: Disable support for adaptive PEBS [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278317 [ 34 ] Bug #2278319 - CVE-2024-26991 kernel: KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278319 [ 35 ] Bug #2278321 - CVE-2024-26990 kernel: KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278321 [ 36 ] Bug #2278323 - CVE-2024-26989 kernel: arm64: hibernate: Fix level3 translation fault in swsusp_save() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278323 [ 37 ] Bug #2278325 - CVE-2024-26988 kernel: init/main.c: Fix potential static_command_line memory overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278325 [ 38 ] Bug #2278328 - CVE-2024-26987 kernel: mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278328 [ 39 ] Bug #2278330 - CVE-2024-26986 kernel: drm/amdkfd: Fix memory leak in create_process failure [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278330 [ 40 ] Bug #2278332 - CVE-2024-26985 kernel: drm/xe: Fix bo leak in intel_fb_bo_framebuffer_init [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278332 [ 41 ] Bug #2278334 - CVE-2024-26984 kernel: nouveau: fix instmem race condition around ptr stores [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278334 [ 42 ] Bug #2278336 - CVE-2024-26983 kernel: bootconfig: use memblock_free_late to free xbc memory to buddy [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278336 [ 43 ] Bug #2278338 - CVE-2024-26982 kernel: Squashfs: check the inode number is not the invalid value of zero [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278338 [ 44 ] Bug #2278340 - CVE-2024-26981 kernel: nilfs2: fix OOB in nilfs_set_de_type [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278340 [ 45 ] Bug #2278342 - CVE-2024-26980 kernel: ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278342 --------------------------------------------------------------------------------

2 2

Other internet / TV providers besides Bell/MTS & Rogers/Shaw
by Bradford C. Vokey 01 May '24

01 May '24

Hello Harsha! I have forwarded your question to our roundtable (roundtable(a)muug.ca). I am sure some of our other members may have some advice regarding other internet / TV providers besides the standard Bell/MTS & Rogers/Shaw. */If anyone has any advice for Harsha, please reply to <h.godavari(a)shaw.ca> if you can./**/ /* -- Bradford C. Vokey Treasurer Manitoba Unix User Group On 2024-05-01 12:00 p.m., Harsha Godavari wrote: > Hello Bradford: > I will try to attend the next meeting. I was on the video conference last month. Are there any other Internet /TV providers apart from Bell_MTS & Rogers_Shaw. Can't find any listings in the "Yellow Pages". I miss the old phone books. > > regards > harsha godavari > > ----- Original Message ----- > From: Bradford Vokey &lt;brad(a)fsi.ca&gta&gt; > Sent: Thu, 18 Jan 2024 20:41:04 -0700 (MST) > Subject: Re: Order #424571408 [Membership #1737 for Harsha Godavari] > > Thanks Harsha! > > Are you available to attend (either in person or online) our next > meeting on February 6th? >

2 1

← Newer
1
...
4
5
6
7
8
9
10
...
260
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

Roundtable