Maybe you shouldn't install new software for a bit

Re:Maybe you shouldn't install new software for a bit by clbrmbr on Friday May 08, 2026 @06:45AM (#48061279)

So what do we do? Pin our dependencies (to hashes when possible), and only update when there are CVEs?

But problem is this could lead to abuse of the CVE system to try to force rapid adoption of attacked packages. What prevents this?

[ Parent | on HN ]

Re:Maybe you shouldn't install new software for a bit by papichulo2023 on Friday May 08, 2026 @06:56AM (#48061356)

Run everything as sudo so they cant escalate any further ;)

[ Parent | on HN ]

Re:Maybe you shouldn't install new software for a bit by clbrmbr on Friday May 08, 2026 @07:05AM (#48061424)

Do you know if this exploit works on Docker containers? And if so, I assume it just allows escalation WITHIN the container? So this attack is scary for Linux desktops and servers, but a fully containerized system like common on CI/CD should be good. Right?

[ Parent | on HN ]

Re:Maybe you shouldn't install new software for a bit by throawayonthe on Friday May 08, 2026 @06:47AM (#48061295)

Nothing :D

[ Parent | on HN ]