[11:12:50]
<miro5001> > <@dumbat:beta.matrix.org> Hi, is there a patch for CVE-2026-98432 kernel tcp flaw?
Already available in debian security. Just run update and reboot
[11:12:50]
<dumbat> Hi, is there a patch for CVE-2026-98432 kernel tcp flaw?
[16:01:40]
<orhtej2> > <@doesnm:doesnmlab.xyz> is it ok that versitygw shows 502 on main page tho s3 capabilities working fine?
Not rly
[16:01:40]
<orhtej2> > <@doesnm:doesnmlab.xyz> idk, like i use it for fluxer and avatars/attachments working fine
> but https://versitygw.doesnmlab.xyz shows 502
Sure, does webadmin->tools->services show any problems?
[16:01:40]
<doesnm> is it ok that versitygw shows 502 on main page tho s3 capabilities working fine?
[16:01:40]
<orhtej2> some service is dead?
[16:01:41]
<doesnm> funny: / shows 502, /index.html is admin login
[16:01:41]
<doesnm> idk, like i use it for fluxer and avatars/attachments working fine
but https://versitygw.doesnmlab.xyz shows 502
[16:01:41]
<doesnm> https://aria.im/_bifrost/v1/media/download/AX5l3hIp_LUWTlf0pc8pbc8Ekwk9ZUpEI387GPNaiHRdSLf7TKLY1ZejfWP5sq9esILxyGB-SFLETbopQ7cKHLZCehl9hYYAAGRvZXNubWxhYi54eXovZzZiVE5ya2xLNUdvSlk5TTA5WXlNWkp0dWdUcUpKWXM
[16:01:41]
<Jonathan> Hello. Do you know if there is a way to secure admin connection with a 2FA or a yubikey ?
[16:12:15]
<otm33> doesnm: This is quite weird: you should get a xml file with error 403 on / and /healthcheck. Can you share your versitygw domain nginx logs ? I will take a look later.
[17:19:46]
<doesnm> where they are located?
[17:19:48]
<dumbat> Strange...my system is updated. It reports 6.1.0-54-amd64 and the patch should be in 6.12.113-1. Am I missunderstanding something?
[17:19:49]
<miro5001> > <@dumbat:beta.matrix.org> Strange...my system is updated. It reports 6.1.0-54-amd64 and the patch should be in 6.12.113-1. Am I missunderstanding something?
Can you share your apt repos?
`cat /etc/apt/sources.list /etc/apt/sources.list.d/*.list`
[17:39:25]
<dumbat> ```
# See /etc/apt/sources.list.d/debian.sources
deb [signed-by=/etc/apt/trusted.gpg.d/extra_php_version.gpg] https://packages.sury.org/php/ bookworm main
deb [signed-by=/etc/apt/trusted.gpg.d/yarn.gpg] https://dl.yarnpkg.com/debian/ stable main
deb [signed-by=/usr/share/keyrings/yunohost-bookworm.gpg] http://forge.yunohost.org/debian/ bookworm stable
```
[17:39:38]
<sinux> I'm interested in the answer too
[17:49:38]
<ewilly> Can't see Debian repo, what's the content of debian.sources?
[18:37:28]
<dumbat> ```
root@vps:~# cat /etc/apt/sources.list.d/debian.sources
Types: deb deb-src
URIs: mirror+file:///etc/apt/mirrors/debian.list
Suites: bookworm bookworm-updates bookworm-backports
Components: main
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
Types: deb deb-src
URIs: mirror+file:///etc/apt/mirrors/debian-security.list
Suites: bookworm-security
Components: main
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
```
[18:37:46]
<miro5001> Does `yunohost tools regen-conf apt --dry-run --with-diff ` report something?
What are the contents of the files /etc/apt/mirrors/debian.list and /etc/apt/mirrors/debian-security.list?
[19:14:10]
<otm33> claude --model qwen3.5:9b-q8_0
Welcome to Claude Code v2.1.316
Claude Code can be used with your Claude subscription or billed based on API
usage through your Console account.
Select login method:
1. Claude account with subscription \Uffffffff Pro, Max, Team, or Enterprise
2. Anthropic Console account \Uffffffff API usage billing
\u276f 3. 3rd-party platform \Uffffffff Amazon Bedrock, Microsoft Foundry, Google Vertex AI
[20:44:06]
<dumbat> mhmm no, I don't think it did anything. This is the content
```
root@vps:~# cat /etc/apt/mirrors/debian-security.list
https://deb.debian.org/debian-security
```
[20:44:06]
<miro5001> > <@dumbat:beta.matrix.org> mhmm no, I don't think it did anything. This is the content
> ```
> root@vps:~# cat /etc/apt/mirrors/debian-security.list
> https://deb.debian.org/debian-security
> ```
`uname -r`
`apt-cache search linux-image `
[20:52:13]
<dumbat> ```
root@vps:~# uname -r
6.1.0-54-amd64
root@vps:~# apt-cache search linux-image
linux-headers-6.1.0-47-amd64 - Header files for Linux 6.1.0-47-amd64
```
[20:52:13]
<dumbat> the second is a long one. Do you want the full list?
[20:52:13]
<miro5001> the one marked as installed
[20:55:22]
<dumbat> sorry what do you mean? I tried grep for installed but there is nothing
[20:55:22]
<miro5001> This one will show better `apt list linux-image*`
[20:57:40]
<dumbat> I do see something that could be the patch
```
root@vps:~# apt-cache search linux-image | grep 6.12.113
linux-headers-6.12.113+deb12-amd64 - Header files for Linux 6.12.113+deb12-amd64
linux-headers-6.12.113+deb12-cloud-amd64 - Header files for Linux 6.12.113+deb12-cloud-amd64
linux-headers-6.12.113+deb12-rt-amd64 - Header files for Linux 6.12.113+deb12-rt-amd64
linux-image-6.12.113+deb12-amd64-dbg - Debug symbols for linux-image-6.12.113+deb12-amd64
linux-image-6.12.113+deb12-amd64-unsigned - Linux 6.12 for 64-bit PCs
linux-image-6.12.113+deb12-cloud-amd64-dbg - Debug symbols for linux-image-6.12.113+deb12-cloud-amd64
linux-image-6.12.113+deb12-cloud-amd64-unsigned - Linux 6.12 for x86-64 cloud
linux-image-6.12.113+deb12-rt-amd64-dbg - Debug symbols for linux-image-6.12.113+deb12-rt-amd64
linux-image-6.12.113+deb12-rt-amd64-unsigned - Linux 6.12 for 64-bit PCs, PREEMPT_RT
linux-image-6.12.113+deb12-amd64 - Linux 6.12 for 64-bit PCs (signed)
linux-image-6.12.113+deb12-cloud-amd64 - Linux 6.12 for x86-64 cloud (signed)
linux-image-6.12.113+deb12-rt-amd64 - Linux 6.12 for 64-bit PCs (signed), PREEMPT_RT
```
[20:57:40]
<miro5001> Does `uname -a` give that version?
[21:09:39]
<dumbat> how does it look?
[21:09:40]
<dumbat> ```
root@vps:~# apt list linux-image* | grep 6.12.113
WARNING: apt does not have a stable CLI interface. Use with caution in scripts.
linux-image-6.12-amd64-dbg/oldstable-security 6.12.113-1~deb12u1 amd64
linux-image-6.12-amd64-signed-template/oldstable-security 6.12.113-1~deb12u1 amd64
linux-image-6.12-amd64/oldstable-security 6.12.113-1~deb12u1 amd64
linux-image-6.12-cloud-amd64-dbg/oldstable-security 6.12.113-1~deb12u1 amd64
linux-image-6.12-cloud-amd64/oldstable-security 6.12.113-1~deb12u1 amd64
linux-image-6.12-rt-amd64-dbg/oldstable-security 6.12.113-1~deb12u1 amd64
linux-image-6.12-rt-amd64/oldstable-security 6.12.113-1~deb12u1 amd64
linux-image-6.12.113+deb12-amd64-dbg/oldstable-security 6.12.113-1~deb12u1 amd64
linux-image-6.12.113+deb12-amd64-unsigned/oldstable-security 6.12.113-1~deb12u1 amd64
linux-image-6.12.113+deb12-amd64/oldstable-security 6.12.113-1~deb12u1 amd64
linux-image-6.12.113+deb12-cloud-amd64-dbg/oldstable-security 6.12.113-1~deb12u1 amd64
linux-image-6.12.113+deb12-cloud-amd64-unsigned/oldstable-security 6.12.113-1~deb12u1 amd64
linux-image-6.12.113+deb12-cloud-amd64/oldstable-security 6.12.113-1~deb12u1 amd64
linux-image-6.12.113+deb12-rt-amd64-dbg/oldstable-security 6.12.113-1~deb12u1 amd64
linux-image-6.12.113+deb12-rt-amd64-unsigned/oldstable-security 6.12.113-1~deb12u1 amd64
linux-image-6.12.113+deb12-rt-amd64/oldstable-security 6.12.113-1~deb12u1 amd64
```
```
root@vps:~# uname -a
6.1.0-54-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.190-1 (2026-10-16) x86_64 GNU/Linux```
[21:09:50]
<miro5001> > Debian 6.1.190-1 (2026-10-16)
Looks ok
[21:27:39]
<dumbat> ah that's great! thank you very much for your help :)