Comment by PunchyHamster
2 days ago
Now with 9000% more zero-days!
> Installs the newest "aged" version
Probably want to install version that has CVE-fixed instead, i.e find the cve for packages and install latest version that has all of them fixed but not later.
Technically someone could fake a cve to get people to upgrade but that's a far more involved process
No comments yet
Contribute on Hacker News ↗