Daniel Baumann

Posted in 2026

Debian: Linux Vulnerability Mitigation (PinTheft)

Following the series of various Linux exploits of the last three weeks, the bug of today is PinTheft [CVE-2026-43494] which is local root privilege escalations.

Read more ...


Debian: Linux Vulnerability Mitigation (ssh-keysign-pwn)

After the Linux local root privilege escalations of the last two weeks, the bug of today is ssh-keysign-pwn [CVE-2026-46333] which allows to read root-owned files as an unprivileged user.

Read more ...


Debian: Linux Vulnerability Mitigation (Dirty Frag)

After Copy Fail [CVE-2026-31431] from last week, the new Linux local root privilege escalations of today are Dirty Frag (Part 1) aka Copy Fail 2 [CVE-2026-43284] and Dirty Frag (Part 2) [CVE-2026-43500].

Read more ...


Debian Fast Forward: An alternative backports repository

The Debian project releases a new stable version of its Linux distribution approximately every two years. During its life time, a stable release usually gets security updates only, but in general no feature updates.

For some packages it is desirable to get feature updates earlier than with the next stable release. Some new packages included in Debian after the initial release of a stable distribution are desirable for stable too.

Read more ...


Pǔ’ěr chá: Storage in Western Europe

The majority of Pǔ’ěr chá (普洱茶) is stored in Asia (predominantly China, some in Malaysia and Taiwan) because of its climatic conditions:

warm (~30°C)

humid (~75% RH)

stable (comparatively small day to day, day to night, and seasonal differences)

These are ideal for ageing and allow efficient storage in simple storehouses, usually without the need for any air conditioning.

Pǔ'ěr chá storage (in Western Europe)

Read more ...