News for hackers. Stuff that matters.

A comment on CopyFail was not disclosed to Gentoo developer. Parent comment

Re:CopyFail was not disclosed to Gentoo developer by stavros on Thursday April 30, 2026 @09:38PM (#47970446)
And what is the insurance in the Linux case, for which the analogy was being made?
[ Parent | on HN ]
Re:CopyFail was not disclosed to Gentoo developer by Loudergood on Thursday April 30, 2026 @10:02PM (#47970581)
Linux was informed properly, and the vuln was not disclosed until 30 days after the kernel was patched.

The real debate here is what went wrong with getting that info downstream, and whose responsibility was that?

[ Parent | on HN ]