Skip to content

Comment on CVE-2026-3888: Important Snap Flaw Enables Local Privilege Escalation to Rootparent

Comments

And if you aren't paying you aren't even receiving many of the updates.

Are you sure you didn't mean RedHat? Last I checked there's no requirement to pay anything in order to use an LTS release of Ubuntu. Even if you go with Pro to get those extra years of Extended Support (to make it ~12 years?) you still get up to 5 licenses for personal use. No money asked, no *BS* subscription model. Isn't that more than enough any non-commercial user?

Read https://ubuntu.com/security/esm carefully. The chance of running everything out of 'main' is close to zero. I am shocked by how little people understand this.

Main is all you need to set up a working system and deploy services. Much like BaseOS in RHEL you get full support for those packages for 5+5 years. With snaps you effectively get rolling releases of LXD, microk8s, openstack, docker and other relevant things. What else do you need? Seriously, how come this isn't enough for a non commercial user?

Because this is Stockholm syndrome, better community options prevail, main is not all people deploy and is not the only repo default enabled. openstack, docker are legacy tech, never encountered anyone using LXD or microk8s thankfully I'll steer clear of that snap garbage barge.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.