Sorry if this is somewhat off-topic, but it's good to know that Fedora is immune from this bug... "This problem not only affects Debian, but also all its derivatives, such as Ubuntu."
http://it.slashdot.org/article.pl?sid=08/05/13/1533212&from=rss
Elio Tondo wrote:
Sorry if this is somewhat off-topic, but it's good to know that Fedora is immune from this bug... "This problem not only affects Debian, but also all its derivatives, such as Ubuntu."
http://it.slashdot.org/article.pl?sid=08/05/13/1533212&from=rss
Well, not quite immune. If you have Fedora boxes that does ssh key authentication with Debian boxes, you can still be compromised. There are good discussions on how we can avoid similar problems however. Our upstream focus is generally a very good thing to mitigate such issues.
Rahul
On Thu, May 15, 2008 at 12:34:55PM +0200, Elio Tondo wrote:
Sorry if this is somewhat off-topic, but it's good to know that Fedora is immune from this bug... "This problem not only affects Debian, but also all its derivatives, such as Ubuntu."
http://it.slashdot.org/article.pl?sid=08/05/13/1533212&from=rss
To be clear, we got lucky on this one. It would be entirely possible for us to get caught in the opposite role on another vulnerability.
Vigilance!
On Thursday 15 May 2008 20:55:04 Matt Domsch wrote:
On Thu, May 15, 2008 at 12:34:55PM +0200, Elio Tondo wrote:
Sorry if this is somewhat off-topic, but it's good to know that Fedora is immune from this bug... "This problem not only affects Debian, but also all its derivatives, such as Ubuntu."
http://it.slashdot.org/article.pl?sid=08/05/13/1533212&from=rss
To be clear, we got lucky on this one. It would be entirely possible for us to get caught in the opposite role on another vulnerability.
Vigilance!
-- Fedora-ambassadors-list mailing list Fedora-ambassadors-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-ambassadors-list
Surely our policy of following upstream closely would actually mean that it would be more likely that _everyone_ gets caught, as Debian (hence Ubuntu) patch things to a much greater extent?
In any case, this sort of affirms the idea that upstream quite often knows best in cases like this.
ambassadors@lists.fedoraproject.org
-
Benjamin Lewis -
Elio Tondo -
Matt Domsch -
Rahul Sundaram