CopyFail was not disclosed to Gentoo developer

Re:CopyFail was not disclosed to Gentoo developer by dgellow on Thursday April 30, 2026 @02:28PM (#47966431)

The worst thing would be to exploit or sell it for profit. Instead of that, publicizing the exploit is closer to neutral–good in my books, that did trigger a really quick reaction from the different actors to patch their kernels and systems

[ Parent | on HN ]

Re:CopyFail was not disclosed to Gentoo developer by ori_b on Thursday April 30, 2026 @02:40PM (#47966566)

Imagine how much quicker the distros would have reacted if they were given a heads up a month ago. But, sure, I guess kudos to this company for not being actively criminal, and merely bumblingly incompetent and overly eager to get their marketing pitch out the door.

[ Parent | on HN ]

Re:CopyFail was not disclosed to Gentoo developer by x4132 on Thursday April 30, 2026 @07:11PM (#47969486)

to which distros? how do you ensure fairness? Do you report this to the maintainer of Red Star OS (north korea)?

The kernel security team was given the heads up a month ago. At that point it is their decision.

[ Parent | on HN ]

Re:CopyFail was not disclosed to Gentoo developer by manquer on Thursday April 30, 2026 @10:17PM (#47970663)

There are channels like the distro security mailing list https://oss-security.openwall.org/wiki/mailing-lists/distros for this purpose.

[ Parent | on HN ]