CopyFail was not disclosed to Gentoo developer

Re:CopyFail was not disclosed to Gentoo developer by dweinus on Thursday April 30, 2026 @07:24PM (#47969618)

No, I will. The distros and the kernel devs should be talking and moving on high sev patches, sure. But real people will have gotten hurt because the reporter didn't want to wait for that to happen. That's on them.

[ Parent | on HN ]

Re:CopyFail was not disclosed to Gentoo developer by john_strinlai on Thursday April 30, 2026 @08:24PM (#47970045)

you must be unfamiliar what used to happen before hard deadlines were set on disclosure. it was much worse for the users.

here is a good start: https://projectzero.google/vulnerability-disclosure-faq.html...

there is ~3 decades of more context if you search for it.

[ Parent | on HN ]

Re:CopyFail was not disclosed to Gentoo developer by stingraycharles on Friday May 01, 2026 @04:05AM (#47972330)

tldr: if security issues don’t get disclosed (or the real threat of disclosure) they won’t get fixed / prioritized.

[ Parent | on HN ]