I never really trusted their “sftp a binary to a server and launch it” approach of server-side development, but this really shows how frail that approach can be. Sounds like an excellent time to look for alternatives, in my opinion.
Perhaps VSCodium will be able to get remote development working again? If there’s an open source version available, that is. I think there’s an unofficial addon?
They announced dropping the old glibc version half a year ago, so I doubt that’s the reason. Besides, most LTS releases backport security fixes like these to old versions, so there’s no reason to assume an old version number is vulnerable necessarily.
Very strange, it seems like they have raised their minimum glibc version, but I can’t really tell why. Based on the announcement on dropping VS Code server support for older distros posted last August I think it has something to do with NodeJS, so I’m guessing it’s because their server-side binary is written in NodeJS as well?
I never really trusted their “sftp a binary to a server and launch it” approach of server-side development, but this really shows how frail that approach can be. Sounds like an excellent time to look for alternatives, in my opinion.
Perhaps VSCodium will be able to get remote development working again? If there’s an open source version available, that is. I think there’s an unofficial addon?
Maybe because of the privilege escalation that was just found in glibc?
https://www.bleepingcomputer.com/news/security/new-linux-glibc-flaw-lets-attackers-get-root-on-major-distros/
They announced dropping the old glibc version half a year ago, so I doubt that’s the reason. Besides, most LTS releases backport security fixes like these to old versions, so there’s no reason to assume an old version number is vulnerable necessarily.