News that might affect BunsenLabs

PackRat · 2026-05-19 22:20:49

Potential to effect every distro:

MS Linux

https://www.zdnet.com/article/microsoft … linux-4-0/

johnraff · 2026-05-20 02:46:48

^interesting!

Pinhead · 2026-06-14 10:48:36

There is a New X11 Server, Written in Rust, With the Help of AI

hhh · 2026-06-14 16:11:01

Anyone know why Arch is getting targeted for exploits all of a sudden?

https://thehackernews.com/2026/06/over- … s.html?m=1

PackRat · 2026-06-14 16:33:06

hhh wrote:

Anyone know why Arch is getting targeted for exploits all of a sudden?
https://thehackernews.com/2026/06/over- … s.html?m=1

Because they can would be my guess. The AUR has a large user base and has always been a relatively easy and tempting target. Maximum damage.

And it's worth noting it's not Arch per se that is having issues, it's the AUR. The Arch devs have always been quick to point out the risks:

The AUR is just popular with a lot of users that treat it like just another repo; and the AUR helpers make it easy to use.

Similar mindset in users that add a ppa to Ubuntu, or worse, Debian and start installing packages.

hhh · 2026-06-14 17:58:52

I see. I always wondered about AUR security, but to be fair the users are quite savvy which is why this was caught so quickly.

Sonatype's first write-up counted more than 20 hijacked packages. Within a day, community trackers and the Arch aur-general thread had cataloged over 400, with one master list compiled by grepping the AUR git mirror, putting it around 408, and consolidated lists climbing higher.

PackRat · 2026-06-14 18:54:18

hhh wrote:

I see. I always wondered about AUR security, but to be fair the users are quite savvy which is why this was caught so quickly.
Sonatype's first write-up counted more than 20 hijacked packages. Within a day, community trackers and the Arch aur-general thread had cataloged over 400, with one master list compiled by grepping the AUR git mirror, putting it around 408, and consolidated lists climbing higher.

I don't think that's valid any more; their userbase isn't much different than any other distro these days. Maybe back when #! was popular and Arch was the distro for intermediate/advanced users. The rise of the user-friendly Arch installers and AUR helpers really increased the access for everyday users. The usual dual-edged sword argument; both the savvy and non-savvy could get an Arch system installed no problem and then start installing from the AUR. Even the popular Arch-based Manjaro has unintentionally borked the AUR a couple of times. Imagine if they tried.

hhh · 2026-06-14 19:53:22

You're validating why I never used Arch. Aside from the pain of installing the thing.

I did like using Paru for the AUR, very easy.

johnraff · 2026-06-15 01:33:26

Pinhead wrote:

There is a New X11 Server, Written in Rust, With the Help of AI

Interesting, though time wil tell if it's a new road or just a temporary side-alley.

itsfoss wrote:

...shows us how prevalent vibe coding has become, whether you like it or not

...a significant number of "not" votes, probably.

johnraff · 2026-07-13 00:58:40

Security support for Bookworm handed over to the LTS team
https://www.debian.org/News/2026/20260712

BL Boron users take note - Debian support has switched to Long Term Support, which will continue till 30 June 2028.

Beryllium users (Debian 11 "Bullseye") should upgrade to Boron before 31 August 2026, and then preferably to Carbon .

#301 2026-05-19 22:20:49

Re: News that might affect BunsenLabs

#302 2026-05-20 02:46:48

Re: News that might affect BunsenLabs

#303 2026-06-14 10:48:36

Re: News that might affect BunsenLabs

#304 2026-06-14 16:11:01

Re: News that might affect BunsenLabs

#305 2026-06-14 16:33:06

Re: News that might affect BunsenLabs

#306 2026-06-14 17:58:52

Re: News that might affect BunsenLabs

#307 2026-06-14 18:54:18

Re: News that might affect BunsenLabs

#308 2026-06-14 19:53:22

Re: News that might affect BunsenLabs

#309 2026-06-15 01:33:26

Re: News that might affect BunsenLabs

#310 2026-07-13 00:58:40

Re: News that might affect BunsenLabs

Board footer