The most we know yet is this post: https://www.openwall.com/lists/oss-security/2019/09/07/2 https://www.openwall.com/lists/oss-security/2019/09/07/2 That impl

The most we know yet is this post: https://www.openwall.com/lists/oss-security/2019/09/07/2 https://www.openwall.com/lists/oss-security/2019/09/07/2 That implies it is the processing from the spool that is at fault; something is serialized and later read back.