CVE-request-XZ-5.2.5-has-denial-of-service-vulnerability
gentoo
| CVE-request-XZ-5.2.5-has-denial-of-service-vulnerability | gentoo | |
|---|---|---|
| 1 | 51 | |
| 0 | 2,019 | |
| - | 1.3% | |
| - | 10.0 | |
| about 4 years ago | 7 days ago | |
| Shell | ||
| - | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
CVE-request-XZ-5.2.5-has-denial-of-service-vulnerability
-
Backdoor in upstream xz/liblzma leading to SSH server compromise
I found a user who seems suspicious to me.
https://github.com/snappyJack/CVE-request-XZ-5.2.5-has-denia...
He understood the software architecture quite early on while working on the following repository. He connected the dots from his other projects and went rogue. (probably to benefit from crypto?). Take a look at his other repositories and code style and recent likes on github. Is he our Jia Tan?
gentoo
- Backdoor in upstream xz/liblzma leading to SSH server compromise
-
Vulkan Video Extensions for Accelerated H.264 and H.265 Encode
Whilst Firefox may support hardware video decoding, Mesa since March 2022 disables patent encumbered codecs by default[1], and distributions such as Fedora and OpenSuse do not explicitly enable these patent encumbered codecs to avoid possible legal problems. Even Gentoo (built from source code by the user) requires the user to explicitly enable a USE flag (proprietary-codes) to use patent encumbered codecs.[2]
The thought process is that AMD, NVIDIA, Intel and the likes are not providing a patent license with their hardware.[3] They are instead just supplying part of an overall system that together with operating system kernel, display manager software, video player software, etc allows the decoding and encoding of patent encumbered video files. Open source software projects and distributions are concerned they'd be found to be infringing patents by enabling a complete solution out-of-the-box. Hence they put some hurdles in place so that a user has to go out of their way to separately piece together the various parts to form a complete system capable of encoding and decoding patent encumbered codecs.
[1] https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/15...
[2] https://github.com/gentoo/gentoo/commit/1265a159743d7f07185a...
[3] https://lists.fedoraproject.org/archives/list/[email protected]...
-
I like gentoo's package deprecation process
Thank you! I don't live in git and this helps! Normally under gentoo I shouldn't have to. This actual git https://github.com/gentoo/gentoo (as opposed to the gentoo browser view) plus this "checkout the commit" should get me much further. ... And probably deserve some space in the gentoo docs.
- Great news java people: Gradle eclass is in the works!
- LLVM stages
-
Is gentoo difficult to maintain as a daily driver?
You choose - here's a list
- Error 2124 when trying to interact with super-block (show-super, set-option)
- HTTP-Tiny: verify_SSL (Draft PR)
-
My CNCF LFX Mentorship Spring 2023 Project at Kubescape
(pending) gentoo/gentoo #30595 sys-cluster/kubescape: new package, add 2.2.6
-
Why do the desktop profiles add so many USE flags?
profiles/targets/desktop/make.defaults:
What are some alternatives?
gentooLTO - A Gentoo Portage configuration for building with -O3, Graphite, and LTO optimizations
cmake-init-conan-example - cmake-init generated executable project with Conan integration
torbrowser-overlay - Gentoo overlay for Tor Browser related ebuilds
llvm-overlay - Unofficial experimental gentoo overlay for compiling llvm with additional components
cmake-init-vcpkg-example - cmake-init generated executable project with vcpkg integration
cmake-init - The missing CMake project initializer
gentoo-install - A gentoo installer with a TUI interface that supports systemd and OpenRC, EFI and BIOS, as well as variable disk layouts using ext4, zfs, btrfs, luks and mdraid.
openssh-portable - Portable OpenSSH
src - Read-only git conversion of OpenBSD's official CVS src repository. Pull requests not accepted - send diffs to the tech@ mailing list.
s6 - The s6 supervision suite.
portage-bashrc-mv - Provide support for /etc/portage/bashrc.d and /etc/portage/package.cflags for the portage package manager (Gentoo Linux)
nulloy - Music player with a waveform progress bar