Black October Made Me Switch From Ubuntu to Debian

Yesterday, I was alarmed to learn that LTS versions of Ubuntu are still lacking a critical security update to patch a severe vulnerability that was first disclosed on October 15th. As of now, all LTS versions dating back to version 16.04 have this vulnerability. Ubuntu's security tracker indicates every release from 16.04 LTS to 26.10. is still vulnerable, two weeks after the CVE was disclosed. Until recently my Hetzner VPS ran Ubuntu. Even though it’s unlikely that I would fall victim to this vulnerability, I find it unacceptable that Canonical are taking this long to ship a security patch. To be fair, Canonical did recommend a mitigation for this but it only reduces the risk. My bigger worry is that we’re starting to see more and more vulnerabilities being disclosed at a pace that’s hard to keep up with. Last month alone was bad enough that it’s now referred to as Black October. Given that AI will only accelerate this trend, I’m finding that it’s now more critical than ever to keep…

Commenting on Bubbles has been removed. Why? If you want to talk about this post, write to the author, use the comments on their blog if it has them, or reply with a "RE:" post on your own blog. Suggestions? feedback@bubbles.town