News for hackers. Stuff that matters.

A comment on CVE-2026-111943: Compromised Intermediate Certificate Authority. Parent comment

Re:CVE-2026-111943: Compromised Intermediate Certificate Aut... by l00sed on Thursday October 22, 2026 @09:33AM (#50195101)
I honestly think you're better off with RHEL. They might have been slow to act in this situation, but do one scan on a Debian vs a RHEL system container image and I'm confident Debian's will show a lot more red than RHEL (even with the fedora)
[ Parent | on HN ]
Re:CVE-2026-111943: Compromised Intermediate Certificate Aut... by jcgl on Thursday October 22, 2026 @10:06AM (#50195510)
I remember RHEL being quite slow with copyfail as well. It'd be nice to have some more comprehensive statistics though.

And I don't put a lot of faith in container scans as a metrics. (More properly, I don't have faith in most containers scanners to properly identify package versions and backports.)

[ Parent | on HN ]
Re:CVE-2026-111943: Compromised Intermediate Certificate Aut... by gilrain on Thursday October 22, 2026 @11:31AM (#50196812)
I'm sticking with the RHEL ecosystem for now, but it's now more out of inertia than a feeling that I gain much by it being the corporate standard. It's gone from "by choice" to "by habit".
[ Parent | on HN ]