NewsBleepingComputer31.07.2026SME

Arch Linux disables AUR package adoption to stop malware flood

Teaser from the source

The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers of existing packages. [...]

This is the RSS-feed teaser. Read the full article at the original source.

Read at BleepingComputer

Other advisories

Not ratedosv:CVE-2026-85032Use-after-free in the MCTP over USB binding when the host disables the class while RX parsing is in progress
Not ratedosv:CVE-2026-115216Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials
Not ratedosv:GHSA-q54r-jf2p-rfr2gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()
Highghsa:GHSA-q54r-jf2p-rfr2gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()
Not ratedosv:CVE-2026-65825OpenReception: one tenant's throttle row disables the PIN brute-force throttle for the same identifier in other tenants
Not ratedosv:CVE-2026-94135Apache Airflow SFTP provider: Async SFTP hook disables host-key verification by default
Not ratedosv:CVE-2026-94134Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default
MediumCVE-2026-85086Apache Thrift: Perl TLS client disables certificate verification by default

Other news entries

Source: https://www.bleepingcomputer.com/news/security/arch-linux-disables-aur-package-adoption-to-stop-malware-flood/

More on disables

Other advisories

Other news entries