unhinge ( unhinge@programming.dev ) deleted by creator to Linux@lemmy.mlEnglish · 3 years agoHow do you track security vulnerabilities?message-squaremessage-square28linkfedilinkarrow-up157file-text
arrow-up157message-squareHow do you track security vulnerabilities?unhinge ( unhinge@programming.dev ) deleted by creator to Linux@lemmy.mlEnglish · 3 years agomessage-square28linkfedilinkfile-text
Do you rely on mailing lists or news articles for security vulnerabilities? Please share. I only got to know about xz/liblzma [1] and curl [2] [3] vulnerabilities through lemmy (maybe because of high severity?). 1 ↩︎ 2 ↩︎ 3 ↩︎
minus-squareeveninghere ( eveninghere@beehaw.org ) linkfedilinkarrow-up6·3 years agoSeeing my colleagues, I fear that the answer from them is “That’s the neat part, you don’t!”
minus-squareLast ( LastoftheDinosaurs@reddthat.com ) linkfedilinkarrow-up4·3 years agoSame here. Our servers are so out of date that we might not have a version of xz with any commits from Jia Tan at all.
minus-squaredelirious_owl ( delirious_owl@discuss.online ) linkfedilinkarrow-up1·3 years agoI don’t think up-to-date Debian stable even got it before it was discovered. No prod servers should be affected
Seeing my colleagues, I fear that the answer from them is “That’s the neat part, you don’t!”
Same here. Our servers are so out of date that we might not have a version of xz with any commits from Jia Tan at all.
I don’t think up-to-date Debian stable even got it before it was discovered. No prod servers should be affected