Arch Linux

9875 readers

1 users here now

The beloved lightweight distro

founded 6 years ago

MODERATORS

k_o_t@lemmy.ml

Is it safe to use the AUR again? (leminal.space)

submitted 3 days ago by halm@leminal.space to c/archlinux@lemmy.ml

18 comments fedilink hide all child comments

I haven't heard a peep about the security status of AUR since the headlines about malware injections into thousands of packages. I've ensured that none of my installed software is affected by the attack (to the best of my ability), but I've held off on my regular yay -Syu since then. What has you all done to keep your machine updated but clean?

And is there any update from AUR maintainers that the situation is under control? Most of my installed AUR packages simply don't exist in the official Arch repos, so if not I'd have to look for other sources.

you are viewing a single comment's thread
view the rest of the comments

[–] dadarobot@lemmy.ml 4 points 3 days ago (1 children)

another thing to note: after an update, when your aur tool says you have orphaned packages installed, highly consider removing them.

if you want to keep them for whatever reason, try to remember (or write them down) so if they get an update out of the blue, you can scruitinize the pkgbuild

[–] definitemaybe@lemmy.ca 2 points 3 days ago

It only takes a few moments to scan the diffs in a pkgbuild. It's not a big ask.