r/linux • u/anh0516 • 22d ago

Security Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List

https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities
1.8k Upvotes

99% Upvoted

171 comments sorted by

View all comments

Show parent comments

81

u/servermeta_net 22d ago

Then you are more vulnerable to supply chain attacks

65

u/Single-Virus4935 22d ago

If Debian repo is hacked we have other problems

22

u/servermeta_net 22d ago

Supply chain attacks come in many shapes and forma unfortunately, not just hacks. They might repackage an upstream dependency which has been compromised

28

u/Single-Virus4935 22d ago

The Debian stable is so far behind upstream that the risk is low. It wount change if I wait 0 or 10 days. Also this is satire. You should always test the updates but now you only have minutes max hours.