3 ms·
It's up to the distro to define what their job is. As I said, I prefer distros that proactively patch security issues regardless of what upstream does :-)
by cuu508 4y ago
It's up to the distro to define what their job is. As I said, I prefer distros that proactively patch security issues regardless of what upstream does :-)
- robertlagrant 4y agoPoint being a log4j issue would be downstream of the distro, not upstream.
- phkahler 4y agoThe fix was to remove a feature from the library. That's upstream. That would also break things relying on the feature, so those apps would need to be fixed. That's also upstream. In each case, upstream WILL have to fix it. It's up to the distro whether they want to do anything about it prior to upstream getting it done.
- robertlagrant 4y agoIt's not upstream of the distro.