• 0 Posts
  • 5 Comments
Joined 1 year ago
cake
Cake day: August 12th, 2025

help-circle




  • What good would rolling back updates do? Also, most if not all distros use package signing. It’s by far safer to update forward, not backwards.

    The advise to “rollback” seems actively harmful, to be honest.

    UPDATE: I think I understood the source of the confusion. If we’re speaking about rolling back the distro itself, then that would be actively harmful. On the contrary, *do* upgrade ASAP and don’t roll back. However, if we’re speaking about stuff that is derived from the system, such as pip/npm/etc registries, then latest artifacts from those could be compromised, so you could roll back those to instead get fresh-er upgrades from an upgraded distro where the signatures are already removed. I think that explains our contradictory-at-first-glance views. If the above is true, we’re actually in agreement on what to do.