4 ms·
>Interestingly, the vulnerable code had been changed upstream the previous year, but the commit was not documented as a security fix and received no CVE.3 This
by pixl97 1mo ago
>Interestingly, the vulnerable code had been changed upstream the previous year, but the commit was not documented as a security fix and received no CVE.3 This might be a reason why Debian 12 and 13 have not received the security relevant backports in time.
Ooof, keeping packages like this up to date with the rate of updates and churn is a mess.
- walrus01 1mo ago"Just run this sudo curl install.sh | bash that further retrieves 165 npm dependencies, I'm sure everything will be fine" ...
- dbgrman 1mo agoIf its just tedious, I bet there is room for agentic/automation to keep things tidy.
- croemer 1mo agoWhich is presumably why Debian developers voted to allow responsible use of LLMs.