3 ms·
"To the best of our knowledge, all systemd-based Linux distributions are vulnerable, but SUSE Linux Enterprise 15, openSUSE Leap 15.0, and Fedora 28 and 29 are
by gt565k 8y ago
"To the best of our knowledge, all systemd-based Linux distributions are
vulnerable, but SUSE Linux Enterprise 15, openSUSE Leap 15.0, and Fedora
28 and 29 are not exploitable because their user space is compiled with
GCC's -fstack-clash-protection."
Interesting. Maybe it's time I switched from Debian to Fedora...
- ejrv 8y agoThis is mostly just a matter of release cycles, where Debian's is slow and the timing is unfortunate for them. Had this been discovered a few months from now (after the release of Debian 10, which has a modern-enough GCC version for -fstack-clash-protection), it also wouldn't have been vulnerable. Fedora takes security very seriously and I adore the distro in part for being on the bleeding edge, but this has more to do with where these distros happen to be in their release cycles than how seriously they take security.