4 Comments
User's avatar
Aliaksandr's avatar

Thanks for detailed explanation. I very like how changelog of Linux update analyzed with description of os specific terms and utilities. Thanks for sharing this. This should help many organizations improve infra setup!

Kurt A's avatar

A couple of engineers from Datadog had a great talk recently (https://www.usenix.org/conference/srecon23americas/presentation/malla) where "interesting" network handling by Cilium entered into the problem too.

Girolamo's avatar

I don't read all issues, but I want to tell you how much I've liked this one. Thank you!

Semyon Slepov's avatar

Thanks for the details, Gergely! Wonder if the name of the “legacy security update channel” is “unattended-upgrades”. I remember mitigating a similar incident (at a much smaller company) caused by this seemingly innocent tool.