Posts by AndresFreundTec@mastodon.social
 (DIR) Post #AgLz0Red9d3Vlt8UrY by AndresFreundTec@mastodon.social
       4 likes, 20 repeats
       
       I accidentally found a security issue while benchmarking postgres changes.If you run debian testing, unstable or some other more "bleeding edge" distribution, I strongly recommend upgrading ASAP.https://www.openwall.com/lists/oss-security/2024/03/29/4
       
 (DIR) Post #B5vPUOnwv5UXt36nK4 by AndresFreundTec@mastodon.social
       1 likes, 0 repeats
       
       @thesamesam @mgorny The "you must update to the latest releaseto get all fixes needed to keep a system secure of all currently-knownissues" bit really makes my head explode.How does GKH expect folks upgrade all their prod systems every ~6 days (the rough average release pace of -stable kernels), with sometimes as much as four releases in a week.That's unrealistic CYA language, and GKH has to know that.
       
 (DIR) Post #B5vtMPri5cVPU6yeOG by AndresFreundTec@mastodon.social
       0 likes, 0 repeats
       
       @tomasv @thesamesam @mgorny I think it's ok to have very frequent releases. There are some problems around how much testing that realistically allows, and that does seem to show up in the frequency of needing fixup -stable releases.IMO the problem is having very frequent releases without providing *any* usable information about who needs to update how urgently, by saying that everyone needs to update immediately.If you continually make unrealistic requests, nobody listens to you.