News for hackers. Stuff that matters.

A comment on CopyFail was not disclosed to Gentoo developer. Parent comment

Re:CopyFail was not disclosed to Gentoo developer by aragilar on Friday May 01, 2026 @04:31AM (#47972461)
Uh, there is a list, named "linux-distros", which is for this purpose (and I think it's for more than just Linux, e.g. I believe it was used for the xz vuln).

Given this was announced when backports weren't ready (and given the POC was at least opaque if not obfuscated), I'm getting the vibe fixing the vuln wasn't as high as a priority as making a media splash.

[ Parent | on HN ]
Re:CopyFail was not disclosed to Gentoo developer by j16sdiz on Friday May 01, 2026 @07:35AM (#47973577)
From TFA:

> Note that for Linux kernel vulnerabilities, unless the reporter chooses > to bring it to the linux-distros ML, there is no heads-up to > distributions.

so, no, `linux-distros` list don't solve the problem.

[ Parent | on HN ]