Post B5wcBXtqNDQF9fALmi by charlotte@akko.chir.rs
(DIR) More posts by charlotte@akko.chir.rs
(DIR) Post #B5wZReoK99TzMMZiKm by charlotte@akko.chir.rs
0 likes, 0 repeats
apparently some distros still haven’t patched copyfaillove obsession with version number stability
(DIR) Post #B5wZRf1RMNyU12iBmK by ariadne@social.treehouse.systems
0 likes, 0 repeats
@charlotte it is because the disclosure has been a shit show.
(DIR) Post #B5wcBXtqNDQF9fALmi by charlotte@akko.chir.rs
0 likes, 0 repeats
@ariadne by the time the vuln was published i was already running a fixed version on all my regular linux systems running community-maintained linux distros.i am not convinced that red hat, a corporate provider of a paid distribution, was unable to provide a patch in a reasonable time frame despite employing one of the maintainers of the kernel crypto/ tree specifically credited in the af_alg.c file.
(DIR) Post #B5wcBY95SXcDuwIWXo by ariadne@social.treehouse.systems
0 likes, 0 repeats
@charlotte yes but we didn't have confirmation that we had gotten the fix out already is my point.
(DIR) Post #B5wcFRJin0Jtti7v4y by fiore@brain.worm.pink
0 likes, 0 repeats
@charlotte @ariadne hey imean , it was a weekend , after all
(DIR) Post #B5wcnOjMuaabipJcno by charlotte@akko.chir.rs
1 likes, 0 repeats
@fiore @ariadne fixed versions of 2 stable and 1 LTS release were already out for two weeks at that point.disclosure was a clusterfuck but likei don’t think red hat has much of a reason to not have it patched already
(DIR) Post #B5wcok6yu5nKK609dA by fiore@brain.worm.pink
0 likes, 0 repeats
@charlotte @ariadne i was just joking about corporate environments ^^