3 ms·
Except if I missed something in my quick research, there doesn't seem to have been a CVE for libebml when it was fixed 16 months ago. So it's really not surpris
by glandium 7y ago
Except if I missed something in my quick research, there doesn't seem to have been a CVE for libebml when it was fixed 16 months ago. So it's really not surprising that LTS distros don't have the fix...
- middleload 7y agoLTS depends on CVEs. And we see here that the CVE database is not entirely trust worthy. The chain is a bit broken.
- madez 7y agoBut the press and slow moving organizations love it.