Package Management
Ongoing coverage on Package Management.
Latest coverage
The Arch Linux AUR had over 400 packages compromised with malware
The Arch Linux team announced a significant security incident where over 400 packages in the Arch User Repository (AUR) were compromised with malware, including keyloggers and credential stealers. The team is actively working to remove malicious commits, ban accounts, and implement solutions to prevent future occurrences. Users are advised to review package updates carefully.
Debian Linux waiting on further info for how age verification will affect it
The Debian Linux team is monitoring new age verification laws, such as California's AB 1043 and a law in Brazil, to understand their potential impact on free software operating systems. Project leader Andreas Tille stated that the implications for a decentralized, volunteer-driven project like Debian are unclear, with potential obligations likely falling on commercial redistributors.
