Remote Code Execution in Alpine Linux
> This is especially bad because packages aren’t served over TLS when using the default repositories. This bug has been fixed and the Alpine base images have been updated [...]Do I understand this right: They fixed the apk vulnerability but the packages are still downloaded without TLS in default repositories?