News for hackers. Stuff that matters.

A comment on 51% of 4M Docker images have critical vulnerabilities. Parent comment

Re:51% of 4M Docker images have critical vulnerabilities by syshum on Thursday December 17, 2020 @09:29AM (#25455824)
Exactly, I know a few places that have years old installs of linux that never get updates... same thing.

nothing in docker prevents updates, just people in general are poor about doing maintenance, this is a story that is old as computers, and why MS forced updates on everyone because left to their own most people choose to "postpone" them indefinitely for fear of breaking things

[ Parent | on HN ]
Re:51% of 4M Docker images have critical vulnerabilities by Wowfunhappy on Thursday December 17, 2020 @09:42AM (#25455963)
> everyone because left to their own most people choose to "postpone" them indefinitely for fear of breaking things

It sure would be helpful if the updates didn't actually break things. It's usually not the security fixes that do that—stuff rarely breaks on LTSC, or in Debian point releases—it's all the other changes that get rolled in.

There's just too much churn across the industry. Even if the changes are good, too little thought is given to the cost of change itself.

[ Parent | on HN ]