Crazy stuff

Seems pretty serious! Update your systems now !!!
The vulnerability affects xz packages prior to version 5.6.1-2 (specifically 5.6.0-1 and 5.6.1-1).
Andres Freund noticed odd symptoms around liblzma (part of the xz package) on Debian sid installations over the last weeks (logins with ssh taking a lot of CPU, valgrind errors) and concluded that the xz package has been backdoored.
The backdoor is present in the tarballs released upstream and contains the following line (originally not present in the source code):


After the update:

Running ldd (shared libraries utility) to ensure no linkage between openssh and liblzma.

https://www.openwall.com/lists/oss-security/2024/03/29/4
https://archlinux.org/news/the-xz-package-has-been-backdoored
23.10 adds ZFS on root during the installation process and Gnome 45 as the default desktop environment.
I may write about Manjaro’s disorganization in another post…
Stable in about 2 weeks
There’s a fix for a kernel crash when unplugging Logitech USB receivers and various other changes regarding hung systems at shutdowns or reboots. This seems to affect various Lenovo, Sony, and Dell systems using Intel Alder Lake and Raptor Lake that were having problems at shutdown/reboot.

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/
Things are back to normal, and we have a networking pull this week. And probably because of the missed week, networking shows up quite clearly in the diffstat, although honestly, that’s probably also because everything else has been pretty quiet. We’ve got other misc driver fixes, of course, and a few filesystem fixes. But network drivers, core networking, and some network-related selftests do account for probably about half of the patch this week. Apart from that, nothing in here looks particularly odd, Linus
https://lore.kernel.org/lkml/CAHk-=wh7awamHE3ujoxZFcGMg3wvLTk8UZYSm3m7vUDhpmP2+A@mail.gmail.com/T/#u
These are only the resources that come to mind in a couple of seconds. Will update them later 🙂
O φιλανδός Linus Torvalds ανακοίνωσε αυτή την ενημέρωση πυρήνα τρώγοντας το παραδοσιακό φιλανδικό γλυκό mämmi
Btrfs scrub is a filesystem checking tool that reads all the data and metadata on the filesystem and uses checksums and the duplicate copies from RAID storage to identify and repair any corrupt data
To start a BTRFS scrub and to check the status of this process:
(1) # btrfs scrub start / (2) # btrfs scrub status /
https://www.phoronix.com/news/Btrfs-Linux-6.4-Better-Scrub

For a complete changelog see the following link:
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.8