Latest Linux and open source news from around the web

Crucial BX500 1TB SATA SSD Sponsored · View on Amazon → Blue Light Blocking Glasses Sponsored · View on Amazon →
LWN.net

[$] AURpocalypse now: a look at the recent AUR attacks

The Arch User Repository (AUR) has been subjected to a sustained attack recently. The attacker, or attackers, have spun up a series of new accounts then used them to adopt orphaned packages and push malicious updates that would install malware on users' systems. It is unclear how many users were compromised in the attack, but the maintainers were playing Whac-A-Mole for several days to respond to each newly compromised package. The project has turned off the AUR's new-user registration, for now, but it is unclear what its long-term response will be or if the AUR can be secured without major changes to its existing collaboration model.

LPI

Code That Built the Internet: The Impact of BSD, Part 1

Like the Spanish Inquisition, nobody expected the internet. Its earliest appearance (as ARPANET) took place in the same yearβ€”1969β€”as the comedy troupe behind the Spanish Inquisition quip, Monty Python. But during its first decade, the internet was treated as a ... Read more The post Code That Built the Internet: The Impact of BSD, Part 1 appeared first on Linux Professional Institute (LPI).

LWN.net

Security updates for Friday

Security updates have been issued by AlmaLinux (dracut), Debian (chromium, firefox-esr, and thunderbird), Fedora (chromium, firefox, nss, ocserv, ongres-scram, ongres-stringprep, perl-Archive-Tar, perl-GD, perl-HTTP-Daemon, perl-Net-Statsd, restic, singularity-ce, util-linux, and vorbis-tools), Mageia (gstreamer1.0-*, libupnp, luajit, opensc, and ruby-rack), SUSE (curl, dnsmasq, ffmpeg-4, frr, google-osconfig-agent, java-1_8_0-ibm, kernel, krb5, kubernetes-old, ldns, liburiparser1, openvswitch, rootlesskit, strongswan, traefik, and trivy), and Ubuntu (ldns, libheif, libnet-cidr-lite-perl, lxd, tomcat11, and vim).

LWN.net

Eight new stable kernels for Friday

Greg Kroah-Hartman has announced the release of the 7.1.1, 7.0.13, 6.18.36, 6.12.94, 6.6.143, 6.1.176, 5.15.210, and 5.10.259 stable kernels. As usual, each contains important fixes. Users are advised to upgrade.

Phoronix

AMD Introduces An AI-Powered Bash Coding Agent

Just days after AMD engineers released a new Lemonade AI server with MCP server integration to make it much more useful, they have now released a new release of their GAIA "Generative AI Is Awesome" open-source software. With AMD GAIA 0.21.2, they have introduced a bash coding agent is their latest big ticket item in the AI space...