apparently some distros still haven’t patched copyfail

[charlotte@akko.chir.rs]

apparently some distros still haven’t patched copyfail

love obsession with version number stability

[ariadne@social.treehouse.systems]

@charlotte it is because the disclosure has been a shit show.

[charlotte@akko.chir.rs]

@ariadne by the time the vuln was published i was already running a fixed version on all my regular linux systems running community-maintained linux distros.

i am not convinced that red hat, a corporate provider of a paid distribution, was unable to provide a patch in a reasonable time frame despite employing one of the maintainers of the kernel crypto/ tree specifically credited in the af_alg.c file.

[fiore@brain.worm.pink]

@charlotte@akko.chir.rs @ariadne@social.treehouse.systems hey imean , it was a weekend , after all