- cross-posted to:
- security@programming.dev
- netsec@lemmy.world
- cross-posted to:
- security@programming.dev
- netsec@lemmy.world
Aqua Nautilus researchers have identified a security issue that arises from the interaction between Ubuntu’s command-not-found package and the snap package repository. While command-not-found serves as a convenient tool for suggesting installations for uninstalled commands, it can be inadvertently manipulated by attackers through the snap repository, leading to deceptive recommendations of malicious packages.
What a surprise. Its almost like forcing snap is a bad idea
Steam snap was so broken Valve told people to use the .deb or flathub.