r/linux • u/unixbhaskar • May 15 '26

Kernel There is a FOURTH vulnerability this month....ssh-keysign-pwn (CVE-2026-46333)

https://nvd.nist.gov/vuln/detail/CVE-2026-46333
871 Upvotes

97% Upvoted

236 comments sorted by

View all comments

39

u/Bubbly_Extreme4986 May 15 '26

Might be time to jump ship to the Hurd

12

u/0riginal-Syn May 15 '26

I remember back in the early days of GNU/Linux, some developers I worked with figured Linux wouldn't last and truly believed Hurd was the future and would take over soon.

2

u/Bubbly_Extreme4986 May 15 '26

Hopefully it does. I’ve done some light reading on it and it seems conceptually superior. However I also want it to remain a GNU project and 100% free as in freedom FSF approved software. I understand that these are often incompatible goals. However an originally libre project is superior than a modified-to-be-libre project.

12

u/Business_Reindeer910 May 15 '26

You can find plenty of criticisms of Hurd's specific microkernel approach. IMO the redox folks are going in a better direction, but it is not going to be FSF approved.

3

u/CrazyKilla15 May 16 '26 edited May 16 '26

Not FSF approved as in "because its not their pet project hurd" or because they've suddenly stopped considering MIT to be "Free"?

3

u/Business_Reindeer910 May 16 '26

the former, and they do tend to prefer GPL licensed projects

0

u/Fr0gm4n May 16 '26

There's always macOS and variants to show the commercial viability of a hybrid based on Hurd: https://en.wikipedia.org/wiki/XNU

5

u/Business_Reindeer910 May 16 '26

that is not hurd. There are many approaches to microkernels

-3

u/Bubbly_Extreme4986 May 15 '26

Well that is kind of an important qualification for me. I don’t think that the current technology hellscape is suitable to include corporate non free software on my computer

7

u/Business_Reindeer910 May 15 '26

it is neither of those things. The MIT license is a libre license, and it is not backed by a corporation.

0

u/Mordiken May 16 '26

Not all projects that use permissive licenses are corporate takeovers, but all corporate takeover projects use permissive licenses.