I have deeply appreciated how quickly #Almalinux has been patching all these zero day #Linux vulnerabilities.

[vwbusguy@mastodon.online]

I have deeply appreciated how quickly #Almalinux has been patching all these zero day #Linux vulnerabilities.

[catsalad@infosec.exchange]

@vwbusguy Same!

[vwbusguy@mastodon.online]

@catsalad Between Almalinux and SUSE SLEMicro hosts patching themselves, I'm feeling pretty good about some of our distro choices right now.

[aj@techhub.social]

@vwbusguy indeed, while Red Hat and Ubuntu have mostly focused on mitigations, AlmaLinux have fixed kernels ready for users to install already.

I especially don't understand why Canonical is dragging their feet; they have apparently released no kernel patches for any of the #copyfail bugs.

[mxk@hachyderm.io]

@vwbusguy it simply pays off to not patch your Kernel.
Smaller Linux distributions which always just shipped a upstream Kernel with custom config have a big bonus compared to distributions like Ubuntu who need to test all patches against their customizations

[maat@mastodon.social]

@mxk @vwbusguy if they had automated test infrastructure like Debian they would have saved days...

[joriki@infosec.exchange]

@maat @mxk @vwbusguy

don't they?