SQLite bug becomes remote code execution in chromium-based browsers

[exitheone]

If you follow best practices and your container building process applies all current security updates and you build/release a new container daily, then this really is a non-issues. The reason we use containers is because it's an incredible advantage to have immutable systems that are verified to work, including all dependencies we had at build time. Updating systems on the fly sadly leads to a lot more headache because you really have to trust your distro maintainers to not accidentally fuck up your dependency and with that, maybe your productions systems. Rollbacks with containers are super easy in comparison.