News for hackers. Stuff that matters.

A comment on Xz: Can you spot the single character that disabled Linux landlock?. Parent comment

Re:Xz: Can you spot the single character that disabled Linux... by manwe150 on Sunday March 31, 2024 @12:11AM (#39881360)
Should the better fix then to have been to revert the bad commit with the malicious commit message, rather than just deleting the dot (as was done)?
[ Parent | on HN ]
Re:Xz: Can you spot the single character that disabled Linux... by humanrebar on Sunday March 31, 2024 @08:29AM (#39883655)
The better fix would be to move to proper dependency management and depend on a version range of a dependency instead of hoping you can do a better job of modelling the same with strings hardcoded into a CMakeLists.txt.
[ Parent | on HN ]