3 ms·
Major Linux RPM problem uncovered
- sitzkrieg 5y agobit of a comically large oversight, impressive it took this long for someone to notice
- redis_mlc 5y ago"The problem is that both RPM and DNF, [a popular software package manager that installs, updates, and removes packages on RPM-based Linux distributions] do a check to see if the key is valid and genuine but not expired, but not for revocation."
- BenjiWiebe 5y agoChild's play to install malware on Linux? I disagree. You can't even access RPM unless you are logged in. And you need root access as well. And once you have that, why bother with RPM at all?