Beehaw
  • Communities
  • Create Post
  • search
    Search
  • Login
  • Sign Up
Virual ( Virual@lemmy.dbzer0.com )  to Linux@lemmy.mlEnglish · 4 months ago

Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware

www.phoronix.com

external-link
message-square
39
link
fedilink
  • cross-posted to:
  • cybersecurity@infosec.pub
  • security@lemmy.ml
  • linux@sopuli.xyz
171
external-link

Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware

www.phoronix.com

Virual ( Virual@lemmy.dbzer0.com )  to Linux@lemmy.mlEnglish · 4 months ago
message-square
39
link
fedilink
  • cross-posted to:
  • cybersecurity@infosec.pub
  • security@lemmy.ml
  • linux@sopuli.xyz
  • istdaslol ( istdaslol@feddit.org ) 
    link
    fedilink
    arrow-up
    1
    ·
    4 months ago

    i wouldnt know where to get the info in the first place. when i use windows update i also dont reed any changelog because that shouldnt be the users job but the suppliers

    • Ghoelian ( Ghoelian@piefed.social ) 
      link
      fedilink
      English
      arrow-up
      7
      ·
      4 months ago

      The whole point of the AUR is that it’s just random people’s code. There is no supplier here. If you don’t know where to find that information, you really shouldn’t be using AUR.

      • istdaslol ( istdaslol@feddit.org ) 
        link
        fedilink
        arrow-up
        2
        ·
        4 months ago

        In an ideal world yes, but I needed some software that was only available via AUR and if the official guides tell me I can install it via AUR I will.

        • Aatube ( Aatube@kbin.melroy.org ) 
          link
          fedilink
          arrow-up
          1
          ·
          4 months ago

          that is indeed the official guides’ fault if they’re not in charge of helping maintain the AUR package. not the case for most of the infected packages here other than notably alvr, though.

    • Aatube ( Aatube@kbin.melroy.org ) 
      link
      fedilink
      arrow-up
      1
      ·
      4 months ago

      windows update doesn’t force you to take a look at the changelog. most AUR helpers do so you better bet that it’s important

Linux@lemmy.ml

linux@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !linux@lemmy.ml

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

  • Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
  • No misinformation
  • No NSFW content
  • No hate speech, bigotry, etc

Related Communities

  • !opensource@lemmy.ml
  • !libre_culture@lemmy.ml
  • !technology@lemmy.ml
  • !libre_hardware@lemmy.ml

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 108 users / day
  • 930 users / week
  • 2.85K users / month
  • 6.38K users / 6 months
  • 1.31K local subscribers
  • 67.8K subscribers
  • 8.08K Posts
  • 108K Comments
  • Modlog
  • mods:
  • AgreeableLandscape ( AgreeableLandscape@lemmy.ml ) 
  • nooter692 ( nooter692@lemmy.ml ) 
  • MarcellusDrum ( MarcellusDrum@lemmy.ml ) 
  • Arthur Besse ( cypherpunks@lemmy.ml ) 
  • Cyclohexane ( cyclohexane@lemmy.ml ) 
  • d3Xt3r ( d3Xt3r@lemmy.nz ) 
  • BE: 0.19.15
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code