4 ms·
> Red Hat assigned this issue CVE-2024-3094. Does that mean this affects RHEL and Fedora?
by AdmiralAsshat 3y ago
> Red Hat assigned this issue CVE-2024-3094.
Does that mean this affects RHEL and Fedora?
- formerly_proven 3y agoRHEL no, Fedora 41 and Rawhide yes. https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users https://www.redhat.com/en/blog/urgent-security-alert-fedora-... https://lists.debian.org/debian-security-announce/2024/msg00057.html https://lists.debian.org/debian-security-announce/2024/msg00...
- dralley 3y agoNote that Fedora 40 isn't even released yet, it's in beta, Fedora 41 / rawhide is basically a development branch used only by a small number of people.
- dTP90pN 3y agoA small number of people with likely professional involvement in the Fedora project and possibly RHEL. A supply chain attack serve as the basis for another supply chain attack.
- jethro_tell 3y agoRHEL won't get this bug for 2 years =)
- fargle 3y agoi knew there was an advantage to being 8-10 years out of date at all times... and when they do port finally backport this bug in 2026, they will probably implement the systemd integration with openssl (pbthththt...) via 600 patch files in some nonstandard divergent manner that thwarts the payload anyhow. see? i knew they were super duper secure.
- richardwhiuk 3y agoRed Hat helps to do the job of making sure OSS has CVEs so there's common vernacular for the problem.